esh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xd9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) 08:41:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000020], [0xc2]}) 08:41:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xff, 0x20000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000840)={@dev, 0x0}, &(0x7f0000000880)=0x14) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000440)={0x1, 0x216, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e80)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001f80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000002940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000002900)={&(0x7f0000002000)={0x900, r3, 0x308, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r8}, {0xc8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x100000001, 0x2, 0xac5, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r11}, {0x140, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x900}, 0x1, 0x0, 0x0, 0x1}, 0x8000) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 414.372044] binder_release_work: 7 callbacks suppressed [ 414.372052] binder: undelivered TRANSACTION_ERROR: 29201 [ 414.389036] binder: undelivered TRANSACTION_ERROR: 29189 08:41:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xfffffffffffff000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x10000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) io_setup(0xba0, &(0x7f0000000000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100, 0x200) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xc6, r0, &(0x7f0000000100)="3e42b62c748e2209e624f8c3aa806d50649cc3caaeabca648b39cd86b94465d2e6d3def434fc46040677c6709f293609bd56695951eaa1102aa09987ea42e7d4899eb969382c48091a771fb846f57a73666cc59717b6f3886bd465ba1662d30cac7328972caa17394082c259940252e54fd51e2d90064f061d8d0062574431255af691e585298e30d8c1d784c667ad0b133f69607134144ceb976f53e404f051c0cd8fe5412f66abf54624d063870c258a432253052cb5734932981e6bc0ea814ef8f06fbe30421c40a141f5f61b34b2a348595118b7de700d", 0xd9, 0xbfb, 0x0, 0x0, r2}, &(0x7f0000000200)) [ 414.479551] binder: 16262:16268 transaction failed 29189/-22, size 0-0 line 2834 08:41:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x882020}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x64}}, 0x40000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000001c0)) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x5, &(0x7f0000000480)=[{&(0x7f0000000280)="3a4d36c39909e37e89b22515e8a129ce88159505787d70ff78e7d35858298ce9523650", 0x23}, {&(0x7f0000000340)="b0889843de5a42ed347e160ee92130f4f93348c1f270d8251797c66154c51a8924483034dddea35e247c370a94a562fcc6d74dc2c50e4c094155ed3bae6d8f93c27f3a2af2848599541858cebed6465b4824ed9e3593633ac0a5948a1395b8b09aab35b8ecc2c84b26a0165d805c2642867dca30859a530458a0d2f8f1b602fe76194f575d61ffa42e9c906b76d86dfad3150e0f8e35e1c825b64082d6921c2660a7915fc63a262b758b35ea250cd527045fe843", 0xb4, 0x2}, {&(0x7f0000000540)="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", 0x1000, 0x1}, {&(0x7f0000002000)="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", 0x1000, 0xfffffffffffffffb}, {&(0x7f0000000400)="cce92daf0d3457097be948b3d804c69cb9eab1fa1b0bb4897a1b70462ad168d96507d7b6eaa7739ea640c7d1ce452758c3ef9d6b676842e24bcd4debc3421b4fbd8884e91026ce40d34de30504cd058a913772d9eba835f2", 0x58, 0x2}], 0x0, &(0x7f00000002c0)=']^security\'#!mime_type:vmnet1\x00') connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:22 executing program 3: syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x3f00}, &(0x7f0000000140)={0x8}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:41:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x30, &(0x7f00000000c0)=[@in={0x2, 0x4e22}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f00000001c0)=0x10) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x10}]) syz_open_dev$adsp(0x0, 0x0, 0x0) 08:41:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x84ffffff00000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:22 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 414.627860] binder: undelivered TRANSACTION_ERROR: 29189 08:41:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) fremovexattr(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7173537ae8b9ce"]) r1 = getpgid(0xffffffffffffffff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40000, 0x0) syz_open_dev$adsp(&(0x7f0000001300)='/dev/adsp#\x00', 0x2, 0x3fffe) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x30010, r0, 0x0) r3 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000001280)='keyring\x00', &(0x7f00000012c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r3, 0x3, 0x2, r4) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000002000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:41:22 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x88a8ffff, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 414.808806] ceph: device name is missing path (no : separator in /dev/loop4) 08:41:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x10}]) syz_open_dev$adsp(0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 08:41:22 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x1400, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 414.922911] ceph: device name is missing path (no : separator in /dev/loop4) 08:41:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) truncate(&(0x7f0000000000)='./file0\x00', 0x6) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:41:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) r2 = socket(0xf, 0x80003, 0x3) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000340)="841fa02b547470a75e36f00d73a2dcc84fb87e6f66ca3b456553ed2a3aa55d7cb96eb417f82e96ad9857d91778f7c82239c781ea5bbe550f2b7671c1a0cb7eb7d7493b76822186ef9ce8c5e520d8e244c15657523eb2cfef337f0de3c59a581095544920db8b990b012b8e51e1743da82220a2eba5a4a98bce985c581d3b0db612d9f620052e7e4187e344cfe74464c940fc12f70611f4cb8d581e0d8092e47af83628cfaf4b28b7edb421800b8db4f3fd21c87d3695e7eab86de01e51", 0xbd) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xfff, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x6, r4, 0x0, 0x5}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 08:41:23 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'group_id'}, &(0x7f0000000100)=""/235, 0xeb) 08:41:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x3a00, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x44100, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) sendto$llc(r1, &(0x7f0000000040)="0fd0978c80e08166fd7325a626bdbc0a3cb931ac69c49d4a28c20d0aac6d4d3ef9709bd7b3b32c661eb182930afc570d15fd7c4675c5c280979945c89dd87e26c93b33811ea09b731d597ee19098b888115f522d1715c6fb77062846", 0x5c, 0x4000000, &(0x7f00000000c0)={0x1a, 0x317, 0x5, 0x100, 0x8, 0xfffffffffffffc5b, @dev={[], 0x20}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x10}]) syz_open_dev$adsp(0x0, 0x0, 0x0) 08:41:23 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x8000000000098400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0xa, 0x0, 0x800, 0x6, 'syz1\x00', 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000180)={"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"}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x8000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x4, 0x100000000000000, 0x8, 0x1}) add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="4d999e2057d38db92c61edf3733a1433844411d192e365e805fb7a3bd0aaa983067fc3e6ae59564c0f46412fc92acaa3e8a8350a4284b7fdc569337cc7368fee15f850ce7bd4a1d4f6ca218ee37199", 0x4f, 0xfffffffffffffff8) r2 = add_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="d9a5b08eb7d258b0c107df1d9bebf7801b6766369b541655f640e687b43b0fdd7fef293a78398f10310a8a285e2509d98f036264f63db18c24f8fcf12fe5ab0a425416a1e91052d7efd7d83a98d68f82cdb59f2da4b4493697a7622ee8c583764bf18bc45fb2d108e53a146bf41f1805e0dacd5c6834882b3e0d56088bf148b5c045dcd1dbf0", 0x86, 0xfffffffffffffff8) keyctl$search(0xa, r2, &(0x7f0000000800)="72787270b2d6b1eb55635f7300", &(0x7f0000000680)={'syz', 0x0}, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x19}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 08:41:23 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) rt_sigsuspend(&(0x7f0000000080)={0x9000000000}, 0x8) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x6400000000000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:23 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x9000, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:41:23 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x10}]) syz_open_dev$adsp(0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 08:41:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xd00000000000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:23 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xa0008000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) prctl$PR_SET_ENDIAN(0x14, 0x3) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x6, 0x0) 08:41:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f0000000280)) 08:41:24 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000040)) tkill(r1, 0x1000000000014) 08:41:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:24 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)}, 0x3}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x100000001, 0x101000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) pause() sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x100, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r1 = dup3(r0, r0, 0x80000) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x88480000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 416.576762] binder_alloc: 16388: binder_alloc_buf, no vma [ 416.609856] binder: 16388:16389 transaction failed 29189/-3, size 0-0 line 2973 [ 416.627331] binder: 16388:16399 ERROR: BC_REGISTER_LOOPER called without request [ 416.643628] binder: 16388:16389 got reply transaction with no transaction stack [ 416.671449] binder: 16388:16389 transaction failed 29201/-71, size 32-8 line 2741 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x87ffffff, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x5, 0x1, 0x2}}, 0x14) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000c72000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000140)="650f01c90f01d1c4c2813a9f53440000c4e1d960ecd2ad580000000f07650fc72d003000009a55b10000fd00b9800000c00f3235000100000f300f01cb", 0x3d}], 0x1, 0x4, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 08:41:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x9, 0x40000) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) fcntl$setsig(r0, 0xa, 0x41) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x2000, 0x0) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x80000001, 0x20000002) [ 416.717901] binder: undelivered TRANSACTION_ERROR: 29201 08:41:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 416.774076] binder: undelivered TRANSACTION_ERROR: 29189 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x8060000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 416.860252] binder_alloc: 16417: binder_alloc_buf, no vma [ 416.866235] binder: 16417:16421 transaction failed 29189/-3, size 0-0 line 2973 [ 416.876524] binder: 16417:16421 ERROR: BC_REGISTER_LOOPER called without request 08:41:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x39, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r2, 0xc00, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xd, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 416.923119] binder: 16417:16426 got reply transaction with no transaction stack [ 416.938246] binder: 16417:16426 transaction failed 29201/-71, size 32-8 line 2741 08:41:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x80000000a}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, 0x8) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r8, 0x8040ae69, &(0x7f0000000040)={0x3, 0x6, 0x100000000, 0x3, 0x800000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) 08:41:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3668, 0x2000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x1}) pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000100)="3ae34ba9d62f8632d1f5b0a0023f5104fc3b95dd98ca514d5ccf2632ce134fae3a07ba700bfb77ba4e63844919d16c2950dee76460969d9dfaa1de7b3cc1bb112b1b78f9f73a1a51055360046d4fb7e46fa313d02a37ecb36028415bfb3195772dfeb3e16ea6d4ff8b65d1f4f94ec5b63749364b77db8d8dd52375fac387e3cf9d07f3e93570b4a3e180e0a2aa0f7b05840ba2bcc42ffd", 0x97}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="f2cf99982416d6213deab604c4fa8f58ec3ec01d47b43ed5a3078b346917697df3ada8c55da2060d7ae230921039ba2d3f17d5a94c8633a19d29c3655c11d26a4d23ea71b414bf361e688d4671926c2765f44a20d3c2156c8a7d68915aaa2c48d02f5dd75f48245aa661949ecd791387605ed0e4d02c5a39c8e5abf5855e6c7c72d0b22fade348c8cd11b8bc9ae4f5b818eca69c2c8d16f73de27172341e11e40a6919baf1f2fa2db935a389f30560e2b65d2fac58b9ea561c80f14bdccdbe84e36940b92a362724286ead9a", 0xcc}, {&(0x7f00000012c0)="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", 0x1000}], 0x4, 0x0) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:41:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x6488, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:24 executing program 3: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x4, 0x8) 08:41:24 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000540)=""/4096}], 0x0, &(0x7f00000001c0)=""/155, 0x0, 0x7}, 0x9}, {{&(0x7f0000000280)=@ethernet, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000340)=""/128}, {&(0x7f00000003c0)=""/180}, {&(0x7f0000000480)=""/59}, {&(0x7f0000001540)=""/102}, {&(0x7f00000015c0)=""/182}], 0x0, &(0x7f0000001700)=""/105, 0x0, 0x8}, 0xc8}, {{&(0x7f0000001780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/59}, {&(0x7f0000001800)=""/162}, {&(0x7f00000018c0)=""/100}, {&(0x7f0000001940)=""/17}], 0x0, &(0x7f00000019c0)=""/238, 0x0, 0x20}, 0x4}, {{&(0x7f0000001ac0)=@un=@abs, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b40)=""/153}, {&(0x7f0000001c00)=""/82}, {&(0x7f0000001c80)=""/73}, {&(0x7f0000001d00)=""/89}, {&(0x7f0000001d80)=""/224}], 0x0, 0x0, 0x0, 0x8}, 0x7fff}, {{&(0x7f0000001f00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/184, 0xfffffffffffffeee}, {&(0x7f00000020c0)=""/253}, {&(0x7f0000001f80)=""/11}, {&(0x7f00000021c0)=""/81}, {&(0x7f0000002240)=""/168}, {&(0x7f0000002300)=""/182}], 0x0, &(0x7f0000002440)=""/239, 0x0, 0x80000001}, 0x401}, {{&(0x7f0000002540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x0, &(0x7f00000029c0)=[{&(0x7f00000025c0)=""/222}, {&(0x7f00000026c0)=""/209}, {&(0x7f00000027c0)=""/172}, {&(0x7f0000002880)=""/70}, {&(0x7f0000002900)=""/153}], 0x0, &(0x7f0000002a40)=""/255, 0x0, 0x6}, 0x401}, {{&(0x7f0000002b40)=@pppol2tpin6, 0x0, &(0x7f0000004040)=[{&(0x7f0000002bc0)=""/196}, {&(0x7f0000002cc0)=""/4096}, {&(0x7f0000003cc0)=""/7}, {&(0x7f0000003d00)=""/23}, {&(0x7f0000003d40)=""/221}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/255}, {&(0x7f0000003f80)=""/178}, {&(0x7f0000004f00)=""/4096}], 0x0, 0x0, 0x0, 0xbe}, 0x8}], 0x400000000000054, 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x500000000000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x0, 0x0, 0x2) [ 417.607566] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 08:41:25 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x185) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000002c0)=0x3, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet(0x2, 0x800, 0x401) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x9, 0x1, 0x2, 0xa2}, 0x14) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000001c0)={[0x0, 0x4000, 0x4, 0x4000]}) [ 417.664504] binder: undelivered TRANSACTION_ERROR: 29201 08:41:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xffffffff00000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 417.740108] binder: undelivered TRANSACTION_ERROR: 29189 [ 417.775886] overlayfs: filesystem on './file0' not supported 08:41:25 executing program 3: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x4, 0x8) 08:41:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 417.857438] binder_alloc: 16478: binder_alloc_buf, no vma [ 417.901645] binder: 16478:16479 transaction failed 29189/-3, size 0-0 line 2973 [ 417.923802] binder: 16478:16486 ERROR: BC_REGISTER_LOOPER called without request [ 417.984581] binder: 16478:16479 got reply transaction with no transaction stack [ 418.003621] binder: 16478:16479 transaction failed 29201/-71, size 32-8 line 2741 [ 418.015474] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 418.051130] binder: undelivered TRANSACTION_ERROR: 29201 [ 418.115913] binder: undelivered TRANSACTION_ERROR: 29189 08:41:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x81000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:26 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xffffffff00000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x80000000a}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, 0x8) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r8, 0x8040ae69, &(0x7f0000000040)={0x3, 0x6, 0x100000000, 0x3, 0x800000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) 08:41:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) munlockall() r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)='\r', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x18040, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x9, "0e80b9404fbb977e95b4a71004059a3ddb4b43aaae5ab7d3d6831bb6ded1cfb7", 0x80, 0x6, 0xfff, 0xc}) 08:41:27 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="710000000100000029304cffd2703561094c18a9c2a339378d163face9677b24262d7732e91255d37a0393838b1c39c142e791d8fde71dac3e9bb17f9958a13ebcf994ed182480cc4aa43d1c0e6cffd0f305db5ddc42e247d56b10e8e0ffff5cd07b4f58c64fda82d8e78821950aee27c4"], 0x20000000002d) 08:41:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x80040200, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 419.517976] binder_alloc: 16499: binder_alloc_buf, no vma [ 419.538319] binder: 16499:16500 transaction failed 29189/-3, size 0-0 line 2973 [ 419.559592] binder: 16499:16500 ERROR: BC_REGISTER_LOOPER called without request 08:41:27 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) connect$can_bcm(r0, &(0x7f0000000500), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:27 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000069bc000700000083070000000082187341dfec6df013a88f01af9900a9d02dbaa103cc1013f79076564258e6bca0ad3e4b892dcfca6f4516c04fd797dce79804683e74491caac123b742cbf3f3aa90a0c2fe3655e9e2f364a4f4af79a756ba94fbb101595c09ea5b517bda4159845b3187fbdc22e5a69d862cffc58672657a26ec54382e0fecc5e04588218e1b44b9f53971b890260ea00a654d79649f21ca8b2458bd36d5bbb261ad8cb2835f77d7529d374b246cb33ad4c1a23dad5705ff70f5d9dd88a59743bc8e48c7f5566edc7650992847f52f"], 0x18}, 0x0) [ 419.607910] binder: 16499:16519 got reply transaction with no transaction stack [ 419.638368] binder: 16499:16519 transaction failed 29201/-71, size 32-8 line 2741 08:41:27 executing program 0: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x130aca06, &(0x7f0000ffc000/0x1000)=nil, 0x6) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x10) 08:41:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xe000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:27 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x1000}, 0x8) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x200, 0xfffffffffffffffb}, {0x80000000, 0x480b}]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0x7}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000061127c000000000095000000000000000dd4d0d62e9be8f78fcc0ceb63ab3a7d68af4e24322970a356d8a8b99d6fc7ab146ed2c4ad3950a04aeaa095b3fa4f4854d2ad3810d345ed9fbd4bf6481e5446cd5f69df2e0a000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) rt_sigprocmask(0x1, &(0x7f0000000180)={0xa525}, 0x0, 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) r4 = fcntl$getown(r0, 0x9) tgkill(r3, r4, 0x2) 08:41:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x4, 0x9d, 0x4, 'queue1\x00', 0x3}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='queue1\x00') ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e00)=ANY=[@ANYBLOB="ecfc00b2b9287f0800000000040000000f00000008000700", @ANYRES32=0x0], 0x1c}}, 0x0) [ 419.795302] overlayfs: filesystem on './file0' not supported 08:41:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x11, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 420.299528] binder: undelivered TRANSACTION_ERROR: 29201 [ 420.342312] binder: undelivered TRANSACTION_ERROR: 29189 [ 420.376430] binder_alloc: 16556: binder_alloc_buf, no vma [ 420.387476] binder: 16556:16557 transaction failed 29189/-3, size 0-0 line 2973 [ 420.396354] binder: 16556:16557 ERROR: BC_REGISTER_LOOPER called without request [ 420.443030] binder: 16556:16558 got reply transaction with no transaction stack [ 420.450887] binder: 16556:16558 transaction failed 29201/-71, size 32-8 line 2741 08:41:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x80000000a}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, 0x8) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r8, 0x8040ae69, &(0x7f0000000040)={0x3, 0x6, 0x100000000, 0x3, 0x800000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) 08:41:28 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x1f4, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000300)={0x3}) times(&(0x7f0000000000)) 08:41:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="16d637fb1bbbe50aed2c67726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000003c0)={0x3c, @remote, 0x4e24, 0x0, 'rr\x00', 0x2, 0x1, 0x39}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x9}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) mount(&(0x7f0000000d40)=ANY=[@ANYBLOB="eb211b0ef5df1b0a7eadeab0c375a3a40e25becc9ec416499d8b4e102990454cc6b61826eeb2a4055c208a803e9c8e8bf7ff0091212e4d9e4c25acf6de1e78825db21649beee91a9d1da4e1aa55dbe47c9412195d377a170c16d7d850000cf75f43ce3f1d70b9d7baa8b2467e8609efe14e3ff387733d1193d4cb8fa7d482f01e622d3623ab5cfe1b830ad600a7510b690426141f8d92d0d51745903c515374b1f26454558028ff8c07028d9bb64a78447e7b4cab96e224666e5c8a634a91f2ef0ca27d5f7004971bcc7727cd27346bb816deb5f4715b884559273470e037a30f80f4e18cc10507afa3c2ee8172c72c2d6"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000f00)=ANY=[@ANYBLOB="38d6235488bb0fb34f52ffa1089aff3a2dda6d16dcf00100000000000000016b7b1039cf593e44000000808131d1"], 0x0, &(0x7f0000000ec0)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000380), &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001040)='ubifs\x00', 0x20012, 0x0) mount(&(0x7f0000000e40)=ANY=[@ANYBLOB="36fcf0a5c67e3fc35e8ad531e4daa7c28e92c297595bda2ed8b4cd21ddee749f48acda31a0d49f6a7c8abb40828f6dac600ab8e87c02f62946ae174dfd7035df9917479db88f28"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) close(r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0a5cc80700315f85714070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffffffff80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x25, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18376c24d17e629db70356df09e2dd12ac5b7024e3ce094e6c8e6d94208e0b51d6292a15b8"], 0x0, 0x0, 0x0}) ioctl$TIOCCBRK(r2, 0x5428) 08:41:28 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xb188, 0x8000) r2 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f0000000340)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000002c0)={0x148, 0x1f80000000000, 0x1}) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) 08:41:28 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x8000000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x5, 0x22fa]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r2) 08:41:28 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r3) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:28 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xf0ffffffffffff, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCSBRK(r1, 0x5409, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="cb", 0x1, 0xfffffffffffffffd) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r3, 0x0, r4) [ 420.960785] overlayfs: filesystem on './file0' not supported 08:41:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="16d637fb1bbbe50aed2c67726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000003c0)={0x3c, @remote, 0x4e24, 0x0, 'rr\x00', 0x2, 0x1, 0x39}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x9}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) mount(&(0x7f0000000d40)=ANY=[@ANYBLOB="eb211b0ef5df1b0a7eadeab0c375a3a40e25becc9ec416499d8b4e102990454cc6b61826eeb2a4055c208a803e9c8e8bf7ff0091212e4d9e4c25acf6de1e78825db21649beee91a9d1da4e1aa55dbe47c9412195d377a170c16d7d850000cf75f43ce3f1d70b9d7baa8b2467e8609efe14e3ff387733d1193d4cb8fa7d482f01e622d3623ab5cfe1b830ad600a7510b690426141f8d92d0d51745903c515374b1f26454558028ff8c07028d9bb64a78447e7b4cab96e224666e5c8a634a91f2ef0ca27d5f7004971bcc7727cd27346bb816deb5f4715b884559273470e037a30f80f4e18cc10507afa3c2ee8172c72c2d6"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000f00)=ANY=[@ANYBLOB="38d6235488bb0fb34f52ffa1089aff3a2dda6d16dcf00100000000000000016b7b1039cf593e44000000808131d1"], 0x0, &(0x7f0000000ec0)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000380), &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001040)='ubifs\x00', 0x20012, 0x0) mount(&(0x7f0000000e40)=ANY=[@ANYBLOB="36fcf0a5c67e3fc35e8ad531e4daa7c28e92c297595bda2ed8b4cd21ddee749f48acda31a0d49f6a7c8abb40828f6dac600ab8e87c02f62946ae174dfd7035df9917479db88f28"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) close(r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0a5cc80700315f85714070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffffffff80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x25, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18376c24d17e629db70356df09e2dd12ac5b7024e3ce094e6c8e6d94208e0b51d6292a15b8"], 0x0, 0x0, 0x0}) ioctl$TIOCCBRK(r2, 0x5428) 08:41:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 421.180856] binder: undelivered TRANSACTION_ERROR: 29201 [ 421.200749] binder: undelivered TRANSACTION_ERROR: 29189 [ 421.248590] binder_alloc: 16605: binder_alloc_buf, no vma [ 421.272037] binder: 16605:16607 transaction failed 29189/-3, size 0-0 line 2973 [ 421.288196] binder: 16605:16607 ERROR: BC_REGISTER_LOOPER called without request [ 421.334826] binder: 16605:16608 got reply transaction with no transaction stack [ 421.342508] binder: 16605:16608 transaction failed 29201/-71, size 32-8 line 2741 08:41:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500d600c46b78d786d2a600bede2ff8c08bdffb56cefd36d03629e6befa55d52439cea0f80312a519461b51a9be4944856836b1d899367ffa35047b4e034cf268bd3a710d2c05982355f5a10f7b9ae4246c12349a557f010100000000000063beaaa517f27f7c68c219d40728d6167fd1b44b8421d26e2e0410505d2f9246e1d5fd97a59aa646e2e789f5c495b987c5872563b7d2c0183ecaeb3b388ee9bc0d0639de4c6ed3f1b6837bcf8cd2f86dbe4793990b05834cece045b2332389c469d0cfeff94be9792a3b0f182e14a9e8bb7a735ceb6c200002000034cf5a8ddde4673f45ba659014ba41b5fbed96ef70231859b0d104e5ab5d856312b7830b48f2"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x80000000a}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, 0x8) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) sendmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r8, 0x8040ae69, &(0x7f0000000040)={0x3, 0x6, 0x100000000, 0x3, 0x800000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) 08:41:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xc5, @dev={0xfe, 0x80, [], 0xe}, 0xfffffffffffff9d7}}, 0x0, 0x40, 0x0, "23f02a6a6dc29c92a6260d1d2d7efad0b6ddb66ca260f051852ad3ebcbd5a5f782f8240bb2bf63ccd19fed751911acfbb4ae1f6b5743e65f75ca47567da84c32ee010e8f076672996e8c43b331dc0b63"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000002c0)=0x68d) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) connect(r1, &(0x7f00000001c0)=@hci={0x1f, r3, 0x1}, 0x80) 08:41:29 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x2c000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) flock(r1, 0xa) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0x48d) recvmmsg(r1, &(0x7f00000062c0)=[{{&(0x7f0000002bc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096}, {&(0x7f0000000200)=""/71}], 0x0, &(0x7f0000000000)=""/190, 0xbe}}, {{&(0x7f0000000180)=@ipx, 0x238, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/35}, {&(0x7f0000000300)=""/32}, {&(0x7f0000000340)=""/180}, {&(0x7f0000001500)=""/245}, {&(0x7f0000001600)=""/202}, {&(0x7f0000001700)=""/140}], 0x0, &(0x7f00000061c0)=""/240, 0xf0}, 0xfffffffffffffffd}], 0x2, 0xffffffffffffffff, &(0x7f00000000c0)={0x77359400}) 08:41:29 executing program 0: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYPTR, @ANYPTR, @ANYRES32]) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000440)=0xc) mount$bpf(0x20000000, &(0x7f0000000700)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r2, @ANYRESDEC]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) sendmsg$nl_xfrm(r1, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00002}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=@newae={0x144, 0x1e, 0xb20, 0x70bd2b, 0x25dfdbff, {{@in6=@mcast2, 0x4d4, 0xa, 0x3c}, @in6, 0xaf, 0x3507}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@broadcast, 0x3502, 0x3, 0x3, 0x1, 0x69, 0xffffffffffff8001, 0x7fff}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@local, 0x3504, 0x4, 0x0, 0x6c2f, 0x401, 0x100000000, 0x7ff}, {{@in6=@mcast2, 0x4d5, 0x7c}, 0x2, @in=@remote, 0x0, 0x0, 0x3, 0x9, 0x100, 0x100000000, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3507, 0x3, 0x3, 0x4, 0x65b11244, 0x8, 0xb13b}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000007c0)) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000740)={[{@mode={'mode', 0x3d, 0x3fa}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x1}, 0x7) faccessat(r1, &(0x7f0000000c40)='./file0/file1\x00', 0xa9, 0x900) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x3fd, 0x0) syz_mount_image$minix(&(0x7f0000000680)='minix\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000700), 0x0, 0xc9}], 0x40, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000940)=ANY=[@ANYBLOB="0400000000000000000000000000000000040000000000000000c3211e15255b45c47bf909000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000021000000000000"]) 08:41:29 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0xa000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [{@euid_eq={'euid', 0x3d, r1}}]}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x2}) setxattr$security_capability(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='security.capability\x00', 0x0, 0x0, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000040)={0x14}, 0x14) 08:41:29 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2000, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:29 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x14, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 421.995981] overlayfs: failed to resolve './file1euid=00000000000000000000': -2 [ 422.025554] binder: undelivered TRANSACTION_ERROR: 29201 08:41:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 422.069502] binder: undelivered TRANSACTION_ERROR: 29189 [ 422.078444] overlayfs: filesystem on './file0' not supported 08:41:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xffffffffffffffff, r1, 0x0, 0x0, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) [ 422.138130] binder: 16641:16642 transaction failed 29189/-22, size 0-0 line 2834 08:41:29 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x20480, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 422.187838] audit: type=1800 audit(1544085689.685:66): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=17329 res=0 [ 422.187997] overlayfs: failed to resolve './file1euid=00000000000000000000': -2 [ 422.207400] binder: 16641:16649 ERROR: BC_REGISTER_LOOPER called without request [ 422.286954] binder: 16641:16642 got reply transaction with no transaction stack [ 422.314915] binder: 16641:16642 transaction failed 29201/-71, size 32-8 line 2741 [ 422.434991] binder: undelivered TRANSACTION_ERROR: 29189 [ 422.455337] binder: undelivered TRANSACTION_ERROR: 29201 08:41:30 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x3300000000000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1000}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="b80e008ee00f060f236c660f38068caec50f20e06635000020000f22e00f2052baf80c66b85ce3e88966efbafc0c66ed660f3a153dd60f0136ce62ba2100ec", 0x3f}], 0x1, 0x0, &(0x7f00000001c0), 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0xff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffff, 0x8000) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000040123080000000000000000000000f0bd98cbede1162366b28fdc777eb53043b0d30b9f93f8e61eaca9a0107170603baf3a92d621aa3e29479283b60f62cff9ccfa6144ec6d7caa571df504c991db497cae39e73688584a6a252fc76e473d296b9a5ba608773d00beba0d350f11eee66e14e449d3680a0dab82f77930e2f74af6802a83902d3dc017d5f5efe043c27f6425245393c128ab11aa066b12cefdf5a9c772e168e1f911a79c59f439a5f4c0a1c9efa7a36644c54f595c41fdd28f00c2a2df4451962a14e4db3f21f8c27018607962794be8860b0b2555"], 0x14}}, 0x0) 08:41:30 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 08:41:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:30 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) finit_module(r1, &(0x7f0000000040)='/dev/audio\x00', 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 08:41:30 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x11000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 422.913866] binder: 16661:16663 transaction failed 29189/-22, size 0-0 line 2834 [ 422.942701] binder: 16661:16663 ERROR: BC_REGISTER_LOOPER called without request [ 422.952063] binder: 16661:16663 got reply transaction with no transaction stack 08:41:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x9}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x1f}, 0x7123, [0x7f, 0x2, 0x80, 0x9, 0x7, 0x7, 0x8, 0x80000001]}, 0x5c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000000000021b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 422.959846] binder: 16661:16663 transaction failed 29201/-71, size 32-8 line 2741 08:41:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fadvise64(0xffffffffffffffff, 0x0, 0x7fffffff, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x103, 0x6, 0x5, "b1bfe282c82d40052d0be0b962f10bd0", "d9a939e66fffc2a9a030ea24ff6a201563c9668345605484eefb3c3222f95ef2521ac55f4e97c4bd07469e4f62d4052ca1d49131df940f035db58357f2e9de562c3c11922bd0ac6dfde41aa4f70473cab1675520c644f46bfc50e70206c015b44659bdceb090b1c9107feacb947c37ba103d292c52a44786228b0de4c2b9cf77b7a39ee15e8d6dc46fade0d26984a7f2a8511d70865693faca23d024994c3939f8f05733b4102743c4a514372294cd0dc7901887a820b97021e1e4931e718c357eaf63c5ada26be3da0680711e978359bfd900d95861dac9b32a99251352a7cddbb539d400b4bb1444582e3fe9b9"}, 0x103, 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000300)=""/4096, 0x1000) 08:41:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.\t\x00u\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 08:41:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 423.060401] binder: undelivered TRANSACTION_ERROR: 29189 [ 423.071511] binder: undelivered TRANSACTION_ERROR: 29201 08:41:30 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x33000000, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendto$inet(r1, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 423.124202] binder: 16687:16688 ERROR: BC_REGISTER_LOOPER called without request [ 423.134673] binder: 16687:16688 got reply transaction with no transaction stack 08:41:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x2, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xb}, 0x48) 08:41:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x45a500, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc807") ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000022000100000000007ec11974737f000008000c00", @ANYRES32=0x0], 0x1c}}, 0x0) [ 423.285053] binder: 16699:16703 ERROR: BC_REGISTER_LOOPER called without request [ 423.311131] binder_alloc: 16699: binder_alloc_buf, no vma [ 423.323702] binder: send failed reply for transaction 89 to 16699:16703 [ 423.334149] binder: undelivered TRANSACTION_COMPLETE 08:41:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x8847, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:31 executing program 3: r0 = socket(0x40000000000002, 0x4, 0x9c3) write(r0, &(0x7f0000000180)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc08000200ec141410", 0x24) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x11}], 0x1) 08:41:31 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000aa0000/0x18000)=nil, 0x0, 0xffbb, 0x8, 0x0, 0x37e) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0xffffffffffff8001, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x1000, 0x1, 0x7}, {&(0x7f0000000140)="94e8fa778e18a21e039e386b4e1c767d3bc6efeb41ad4173a77f355f5e3d94618078a6a3718d65b04f6094f135b4fcbdf97d33aba6602a919af479ac1570cdf646812fc5addc4642be5b8155e9d369f3841426b701aaf9426005f5570a81c65ff1c47b8220e512a493520996714816550e1b674f5184b2c7a234b0a5923655183fa16f422bb2dd8d59facd56f6ce721d80e1dbcf6945f901cc9500558426965e375c9c5badcb34d78247fcb69719bccb3ada5f8a4e5296a6d288e7bf803d41e5c8408cd79c9f0542061646c71de9e9", 0xcf, 0x97, 0xf055}, {&(0x7f00000002c0)="20cffe0726893c2a23985eb4714ac1a877f6fb15f891e768c10f3ecfc31db5dcce931e8deed28db9e27ff4844678af57a2ebcf8a8cc81226f90e5419acb144271135fb74350e55373eaa16f200eafeaf824cbb0f8c2ddf10348e32ec8d2c65bfce25df816f5cbe465e11f0c2f000577351c9fc53b32099dc9bf823e0688644b98afe5c52784ceb340d7007c8340775b0defa37fc2048c94daf011b23927e8ddb5294aae06f692d4438cd0798aed2ac73244a15b9e293c992a0cb7a752ba9f693bc7bdf53111ac98165befede19d5feb1f1fd8934273ee653540c2a7bb7ea2b4a0442567f46bf51ed3244fa68da521687cc33d269", 0xf4, 0x180000000000, 0x101}, {&(0x7f0000001440)="923e515238b97bc1abe8fa3c75cf19299eac1d36452d957e1e243a17cb451ce8510a8314f7f53d950c1f49dea8004f4154991f5953a9e20269910d84b33235c473f0e96a6fe3ff831d708f94df7531a0081d0f", 0x53, 0x0, 0xa7f}, {&(0x7f00000014c0)="e519fba2070906fe45416e8df11c895d8f61d979dbf70d629019cfeb5b4c418a6c553e9c7ad36371fcdf0480807ae99e00b9bf92b342cf6506c869f529859da88985f918ae43f351d78e3b86598540514099fac738b1791d087cc9f3f55310c39529d587ee22216349959c7aa7e233e1fe0b5d2a875b160860df34ef766c80a91a3ae379a65da39cc4ce3f3a666b91a804f987f422e2e98c9e2f6a56283b76fe1c0e12cf30773dbaae161f6d96596ebcd738531ecebad045d17e5973d26b75d669e1f4b88d294b1538e00552a5a5", 0xce, 0x5, 0x8}], 0x2a0000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 423.816031] binder: 16717:16721 ERROR: BC_REGISTER_LOOPER called without request [ 423.842651] binder_alloc: 16717: binder_alloc_buf, no vma [ 423.858610] binder: send failed reply for transaction 92 to 16717:16721 08:41:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x700, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 423.876582] binder: undelivered TRANSACTION_COMPLETE 08:41:31 executing program 3: r0 = epoll_create1(0xffffffffffffffff) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x7fffffffffffffff}) 08:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 424.074327] binder: 16739:16742 ERROR: BC_REGISTER_LOOPER called without request [ 424.084898] binder_alloc: 16739: binder_alloc_buf, no vma [ 424.101259] binder: send failed reply for transaction 95 to 16739:16742 08:41:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x32) accept$alg(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x0, &(0x7f0000007b00)}, 0xffffffffffffffff}], 0x2, 0x0) 08:41:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x7e}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:31 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)=""/45, 0x2d}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x46}, 0x4}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:31 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0x1c2, 0x2040) ioctl$TIOCCONS(r1, 0x541d) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000900)={{{@in=@loopback, @in6=@local, 0x4e24, 0x521, 0x4e20, 0x2, 0xa, 0x80, 0xa0, 0xbf, r2, r3}, {0x1ff, 0x6e03, 0x6, 0x5, 0x8, 0x81}, {0x4, 0x10000, 0x2, 0x8}, 0x9, 0x6e6bb9, 0x3, 0x1, 0x3}, {{@in6=@mcast2, 0x4, 0x3c}, 0x0, @in6=@loopback, 0x3506, 0x2, 0x2, 0x81, 0x7, 0xfff, 0x100000000}}, 0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/97) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @local}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) write$P9_RSTATu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f0000007d020000005a0008000f0000001003000000030000000000000000000100010400000700000006000000000000000e006d656d6f72792e6576656e7473001000706f7369785f61636c5f61636365737319006d65ff6f72790300637075100076626f786e657431626465762847504c", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x7f) syz_open_dev$dspn(&(0x7f0000000600)='/dev/dsp#\x00', 0x100000000, 0x0) open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x4) fadvise64(r4, 0x0, 0x10001, 0x7) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x33, "6d65ff6f7279"}, {0x2d, 'cpu'}, {0x0, 'cpu'}]}, 0x12) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) 08:41:31 executing program 3: r0 = socket$inet6(0xa, 0x40043, 0x7fffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x40000) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x908, 0x100b700, "404857e517dd99353e2512c66b6a8b08c14d6d6dfdd2f034", {0x85d4, 0x7}, 0x6d23}) socketpair(0x10, 0x7, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r3, 0x7}, 0xffffffffffffffcf) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={"62726964676530000000008000", &(0x7f0000000140)=@ethtool_cmd={0x9, 0x0, 0x300}}) [ 424.120933] binder: undelivered TRANSACTION_COMPLETE 08:41:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:31 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) perf_event_open(&(0x7f0000001b00)={0x2, 0x70, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x14) socket$kcm(0xa, 0x522000000003, 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x8000}, 0x0) 08:41:31 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x10a, 0x8}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 08:41:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x33000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:31 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}, 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 424.324296] binder: 16761:16762 ERROR: BC_REGISTER_LOOPER called without request 08:41:31 executing program 5: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x80000001, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000180)="ca121267e147d8782205d220c5ebb8977208f168cb3f94c46698bcc76d94468d00", 0x21, 0x7}, {&(0x7f00000001c0)="9b5972747847c1b339045229ce260fa8c7a733d8d81ec1698382aafe3618a52229b6b871e06244d933eb69d75f3e6cb93d3dcad32ec6b81a2c1f666fea75735be8c4", 0x42, 0x2}, {&(0x7f0000000240)="dd7ced71b4b128bba398b728c684875c5d3b6b5878960862b30e0401aaaf340ca4a06915024b19fab0005d40e0ee915433d2a3c63dbfc74723a194201cb42743fc86197db9f9f06f2c742bb982c74871bb73057f926bf941d07ce44cb24778dd36a155ccaa8b9fa41f453c9be4e4c30621879229c618426343d0054ece84c4572048087d8907d00d1b2dfe8c9bf3c393e17cf6f065ee95e8d0efb31bb9610dcc85b92a590d06d2070b4ecf8506c3536b0800c5b4a28179898421bfe115d0da670a655d61e96297f2cc578a40265e459dac4c", 0xd2, 0x1}, {&(0x7f0000000340)="9cc656b33b5e1e74809c5a1df7325bd381dee3a0bcdc34e66622da1bc22f74f23ffb70baf1d994105e38d8cffb6a66f5773dde2341281a46c8c8be5aa8d5059b6845ce02dfe1cc6389641653f838eb58ee1058a206a9d4c5f99f68e05f8d0f73629340dc364dee1f29de00f314b7123255d5ff524d7bbd58e0e164783fa7e49cf685a4de1ecc11fa4de65ee02ff69a2d54dc87daa539554707f71ef22a78543b014ac1f4e26b969ff722c4158f693029bde94ddcd3291ce71cd7498d7cbf35a4c4c4accfb67a41bd5154206fc5856a4ba120a715819cf1c06f2988cdc63e425d743c12e7", 0xe4, 0x3ff}, {&(0x7f0000000440)="bfce76054671f1ce43edacb101026f1571a4157b518bd6d43106f41f8c1f30e05f73c93cf3e821c64dc600bc58147d22ca5221be397556a9ae440025fae640b37ef7e287858871157dacb115157a73296ddfde3c38f017279451e86dd8708601dbaeddb929af528589e0027c2e86400ab0a9cbba32e98c8e708133036559a61d2a603e391bae6cfc9cbcd8959c39e8b84d5e63a9570fd12fca682e0c920a1f1bd75e0d637b0c013b5a38", 0xaa, 0x5}, {&(0x7f0000000500)="fb9cd70311947f45a36b49531018a22bd5951cefdb1628b50f5cdcb6ea0b3830fd5045721090d959429aa015c7b9baf0eaef268b0d1d8b2980c14fbc4e", 0x3d, 0x100}, {&(0x7f0000000540)="4c22f1be6bfac92cec0b7add4159001809e1c334c1c679968b7bc51c44890bc812164c6b36b8d10f8b426f30b06e151eb85128f65a0d210800d0138f839e01b4a680781f0dc32a1c887199d828828de15faa74f9a3a7736fc4d53ed8f85760f07b7bdb0e9b77ad6d4080f820059a7d8dc474f10d492718fd0fedc04aa310ddeab0a3fe609f", 0x85, 0xc2}, {&(0x7f0000000600)="d3a668c256e855de801bd5921ca039aad6a04590ac1b116e6c34531e43d5a0877a51f9491131f6cbecb2f52172c652327debe307bec1ce8a37e7f87e96e9ac30a5173d540b9d0ab23370a6b19e38285ccc116417d5383bdcaaffc34a62522544c45e0b96b2237c058e07609e8de174cb6a2bea9c24cda8ae9c7d58da6fbe9486c33dbfa26af9b589edf4a541477c27034ee2849f80ba5686db0800bba483", 0x9e, 0x5}, {&(0x7f00000006c0)="684380464dcec0e733f55d3dcb99fa0e794b7a7ce68e6b1cb4af2ab382509841e7499591f15acace0e153a69e7126aa52130d6ef1e2f924b431f69492e3469288c0f9de7c2dee4967371907151bfca69119a6958f95d83b7fc3d8b31a33877a3bbb8b4546e48c58742651ff47c55adc37ce23c1f349acc74a326c11beb1df142c2318be296a232fc7f0e909fa2e54a327e0a6751ed8ea4fe2cf001840275c30a3af054ca4298a249501c96bc3387bf880f036358519a07efd853d6c9c8ad21f06ad575c5624c22ae0ca93515f32874c4bfb58625a9dfbeacf05c81cda586220698b1976e2fbb537647c2a51a4383620db44cc6a28f1f7ad6636c021976", 0xfd, 0x13e}, {&(0x7f00000007c0)="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", 0xfe, 0x7ff}], 0x100000, &(0x7f00000009c0)={[{@integrity='integrity'}], [{@dont_hash='dont_hash'}, {@audit='audit'}]}) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='{bdev+cpusetvboxnet1\x00', 0x15, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) 08:41:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x89060000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 424.383143] binder: 16761:16772 got reply transaction with no transaction stack [ 424.410832] binder: release 16761:16762 transaction 98 out, still active [ 424.421368] binder: undelivered TRANSACTION_COMPLETE 08:41:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 424.492790] binder: release 16761:16762 transaction 98 in, still active [ 424.499650] binder: send failed reply for transaction 98, target dead 08:41:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x13, &(0x7f0000013e95), 0x4) 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3580]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:32 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x81, 0x501000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') rename(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00') r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd700007000000010000001c008700080001004e75908550f20a03a7ad85f309bb33d4776e842692feffd11463d0039f0ccd94e8be4222b95805c1f19d288a120d8e38c9ebd98aac47b382c1db1df84d2360b984765c0c5768b9fa908620c80a94c165b7853ee8de01cffd3f2b7751c5acbc79ea020f16231c8ebad017cdf6958f8d0ec2", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) open(&(0x7f0000000040)='./bus\x00', 0x141043, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 08:41:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x100000001, 0x0, 0x1, 0x100}, {0x6, 0x3, 0x10001, 0x3}]}, 0x10) [ 424.617723] binder: 16789:16792 ERROR: BC_REGISTER_LOOPER called without request [ 424.626168] binder_alloc: 16789: binder_alloc_buf, no vma [ 424.632245] binder_transaction: 6 callbacks suppressed [ 424.632263] binder: 16789:16792 transaction failed 29189/-3, size 32-8 line 2973 08:41:32 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRESDEC=r1, @ANYBLOB="4f76b9a9eb6759195f853357630b243e4c6f12b9f9cc348e1a7b21fa7d62d147898e9147cb2984a33acb2f6363ea3d8f8693560e2f60c72a97015792e569d6bd9cf62b29454a7c03c6bd45912d6cecd005f1ace308e31cfe4914d71fea7c66a3acd9645de0376bbe8d60010eaa6092cfe366c76d06332b2909854f3758cef2aad188a6de", @ANYRESDEC]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002c80)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000002c40)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x3e9000) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_dev$vcsn(&(0x7f0000002500)='/dev/vcs#\x00', 0x100000000, 0x202000) keyctl$get_security(0x11, 0x0, &(0x7f0000002a00)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) shmget(0x2, 0x2000, 0x400fd, &(0x7f0000ffd000/0x2000)=nil) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f00000002c0)={0x3, 0x0, 0x5, 0x3f, 0x4, 0x4}) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) listxattr(&(0x7f00000027c0)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)) fcntl$setown(r3, 0x8, r6) fchmod(r4, 0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000180)) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0xffff, 0x1000, 0x8000, 0xcff3}, 0x51, [0x2, 0xff, 0x4, 0x4, 0x7ff, 0x8, 0x40dfb2d1, 0x1000, 0x40, 0x2, 0x1, 0x12, 0x0, 0x4, 0x7f, 0x7, 0x5, 0x3, 0x8, 0x101, 0x7ff, 0x1, 0x7, 0x5, 0x9, 0x1, 0x5, 0x7, 0x100000001, 0x5, 0x7, 0xffffffff80000001, 0x80000001, 0x4, 0xa916, 0x7, 0x6, 0x8, 0x8, 0x0, 0x8, 0x0, 0x6, 0x0, 0xffff, 0x7fffffff, 0x4, 0x1000000000, 0x80000000, 0x6, 0x6, 0x0, 0x0, 0x9, 0x8, 0x80000000, 0x0, 0x10001, 0xfffffffffffffff9, 0x0, 0x8, 0x9, 0x7, 0x9], [0x4, 0x4, 0x1, 0xfff, 0x1f, 0x8, 0x8, 0x0, 0x35b6, 0x1, 0x3ff, 0x9, 0x5, 0x1, 0xac64, 0x10001, 0xd5f, 0x1, 0x2, 0x4, 0x9, 0xffffffff, 0x3, 0x7, 0xfb3, 0x7fffffff, 0x2, 0xa5, 0x9, 0x0, 0x5d3d, 0x9, 0x7, 0x7, 0x0, 0x6, 0x4, 0x2, 0x5, 0x200, 0x1f, 0x4, 0x6, 0x2, 0xfff, 0x80000000, 0x7ff, 0x7, 0x4, 0x127, 0x20, 0xe0, 0xfc3, 0x80000001, 0x2, 0x3, 0x0, 0x401, 0x6, 0x10000, 0x0, 0x7f, 0x1, 0x8000], [0x4, 0x7, 0xfff, 0x6, 0x7fff, 0xa2, 0x401, 0x90, 0xffff, 0x740, 0x9, 0x1000, 0x5, 0x80, 0x1ff, 0x6, 0x3, 0xffffffff, 0xd7d, 0xb3, 0x69792d1e, 0x0, 0x1, 0x80000000, 0x2, 0x922, 0x4, 0xba20, 0x7, 0x100000001, 0x9, 0x6485, 0x9, 0x9, 0x7fffffff, 0x0, 0x200, 0x1, 0x1, 0x3effcb6c, 0x3, 0x7ff, 0xfb9c, 0x10000, 0xa6, 0x8, 0x65, 0x2, 0x8, 0xfffffffffffffffe, 0x8, 0x3, 0x1ff, 0x8, 0x7, 0x7, 0x6, 0x2, 0x6, 0x9, 0x4, 0x3, 0x5, 0x6], [0x7fff, 0x5, 0xc00, 0x1, 0x6, 0x7530aad0, 0xc2, 0x4, 0x0, 0x8, 0x1, 0x5, 0x8, 0x7f, 0x223b, 0x8, 0x8, 0x8001, 0x7, 0x5, 0x7, 0x39, 0x90, 0xffffffffbf31bfa1, 0x0, 0x7, 0x41, 0xfffffffffffffff8, 0x7, 0x6, 0x1, 0x100000000, 0x9361, 0x3, 0x9, 0x4, 0x3, 0xfffffffffffffff8, 0x40, 0x8, 0x6, 0xfff, 0x4, 0x9a, 0x4, 0x3, 0xa45, 0x7, 0x3, 0x5, 0x1, 0x4, 0x7, 0xfffffffffffffffb, 0x8, 0x4, 0x40, 0x3f, 0x3f, 0x2, 0x3, 0x8, 0xe, 0x9]}, 0x45c) socket$inet6_tcp(0xa, 0x1, 0x0) 08:41:32 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0xa0) r2 = geteuid() r3 = getgid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000005c0), &(0x7f0000000000)=0x68) stat(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x40, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r4}}, {@subj_type={'subj_type', 0x3d, 'reiserfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, '/dev/input/mouse#\x00'}}, {@euid_gt={'euid>', r6}}, {@audit='audit'}]}}) syz_mount_image$reiserfs(&(0x7f0000000500)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xa0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500010}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x3cc, 0x6, 0xb, 0x600, 0x70bd29, 0x25dfdbfe, {0xf, 0x0, 0x8}, [@typed={0x8, 0x8a, @uid=r4}, @generic="e76b6d4695d543f9aebf30438bfda1df23261438925b79217ee0c5f1c2f3a0c556549d357c8d0178564d87deefe79d7f2a91fc96dd42b2ec5dd2883d6916ae6bbb44ecdc835798629011fc2ad333d8ea9248f5589222befd8c87fbeeb689f859192f4c985a1cdb80b1e45716fe1d6f5a3c1fed53ecd7485734ae05e58043df4adfd112577cf96b40d4807ae2af25c43156e119123d98d2c82c070922a0e5949568f7e7aabafe3846e01d76d53489bd72562941714b2caf99857235b52c37ce07d46b3b844d6148451c6abe4e", @generic="9da0259085f1770cd3474bfb6f4e155320d20dc115b3ec785122953418c24c47da061ff82a2b3d4fedce561da2c794a827980e9d8adb3228fb81a351571aca58b932362dfdb7fa6e243fbe945cea3aee55c9510127f65f46515e91559f681710659b9c0983360b1210f378ef5fe59cf46112b66edac45c2ba4d25bee4b22fb62db992ab51189cc8775c1f6bd182d03920cfd76b4872b4d7d4817993f16e90fe4c544b744e199f5394a0d6cbda4617b", @typed={0xc, 0xb, @u64=0x4a}, @nested={0x228, 0x2e, [@generic="90eda6c81dea897d5d295c36d545ecd9da72d07c9b6cf1f8aa4939d6daf4de9b034d4131b8d99bd8de13e6d6bd655028270f78f3c5ad7a3aef0bb913e041976c91d5fe4228fa5bca9958a23c93a520aa2350e4bd12f3ff395180c2937a88a26c21840374b6a64a9339827f1eb511e9e389d6ab8ee934b7f5e4ecbc41c0a29bfc1c5001ca1cc3488594cf7e0ce919474d655e3bf8461d07f3a50f539319d2091e646f8efdfa54a33c04e90bf9", @generic="0c96850190e4ac546defa0b3a032522ab2d37e19c8494706714be6", @typed={0xc, 0x50, @u64=0x3}, @typed={0x90, 0x21, @binary="02098ad43b19e1edc16e9b6e9097944aac8bfffa57063606c39b5f48edcb034da7e254b57e993763324d6496095267eb7fc4c5905a66e0e21080e85ac35c41da8f646a2a95cbb88a53c625b987bf4cf59921bc9c6ed7c6eec4b65c3d0a6b6a36a96befc3d297c0d2b7e977fae761bb791bb69a2f990a136e07312a6a689aae424a08e57a2509dba9f450"}, @typed={0x8, 0x22, @u32=0x5}, @generic="28479e10c0a4b363546f3c434634025e2a60eaec80ff9f6b4153cd770cdb51533415b69b7bb25bcb53df1ca69288a4b5af0721e1b0b668031a4cce684138f9c8331ebdd42a2d2928f249de4821c8af21d6a382cc9ed7d2fa7f7504284654f105f4c94f24830424ac073438a5a629f5cc8c7e7cf31a19ef70d7236423cc80ab610886f4304880600c0e7510cb20c7041b48b94e70a245304fa94f48ecffd4d958000f7f19", @typed={0x14, 0x1ff, @ipv6=@mcast2}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x400) ioctl$PIO_FONT(r7, 0x4b61, &(0x7f00000000c0)="856fa2103a0b36cf0767bf4452d013b5f8d7124990f5eec2b36d353d78b4213409238a42e818e08c2d7a33ec810aa41f524825b1620c3e9ba2ffc4e525c1654ec190706598e14510d42ca7aef0b3ea2eda13beccebd73d1275da76551cc4d645b5") 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xd00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 424.747894] binder: send failed reply for transaction 101 to 16789:16792 [ 424.784346] binder: undelivered TRANSACTION_COMPLETE 08:41:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x1) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x84ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:32 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x40000008ec0, 0x0) close(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x1, r4}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 424.965141] binder: 16821:16825 ERROR: BC_REGISTER_LOOPER called without request 08:41:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") r4 = semget$private(0x0, 0x0, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f0000000200)=""/120) write$binfmt_aout(r3, &(0x7f00000000c0)={{0xcc, 0x9, 0xbd8, 0x15f, 0x273, 0x99, 0x1f1}, "a34f77d551555fd4ae30f787bf3d18e00934f14d9c9b22a62cb7df1e9f068859b784712e8213ba7cd172c666c472de18b8f74030beb35b480d8741b5bb5863074d4e9f8aa5c9324844a9c882f88e81faeba87434cb72e7bfd7f62b8832efb554d4dcd127f6f0821efff446cee88c991eb63e9c149f271f75e6ec0ada5c7a9f6bba1728849dcbb4834f25311bcf4be2fc7b95824a4d48a7e449fbfb590f637bd1b5ddc743911e58687eaa098de05e692b8a8eb451ef5160b4695a02a28a7a0636ca70d4f405735bb5c234665fb33ab2c06f7275634adc9034821cdd2c9d9f00297c"}, 0x101) ioctl$KVM_RUN(r3, 0xae80, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000040)=""/12) [ 425.005416] binder_alloc: 16821: binder_alloc_buf, no vma 08:41:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x810000000000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x20, 0x200001) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x3f, 0x9, 0x800, 0x1f, 0x0, 0x7fffffff, 0x0, 0xe, 0x7, 0xffffffffffffffff, 0x101, 0x9, 0x7f, 0x9362, 0x7, 0x800, 0x8, 0x1, 0x6, 0x8, 0x7, 0xffffffffffffffe1, 0x3, 0x7, 0x4de9, 0x10001, 0xfffffffffffffc00, 0xe6, 0x5, 0x7ff, 0x0, 0x286923d1, 0x10001, 0x0, 0x6, 0x5, 0x0, 0x50, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x10042, 0x0, 0x7fff, 0xf, 0x3, 0x3, 0x10000}, 0xffffffffffffffff, 0x9, r4, 0x9) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') [ 425.050689] binder: 16821:16825 transaction failed 29189/-3, size 32-8 line 2973 [ 425.073952] binder: send failed reply for transaction 104 to 16821:16825 [ 425.093473] binder: undelivered TRANSACTION_COMPLETE 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:32 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt(r0, 0x10f, 0x81, &(0x7f0000000000)="01d76005", 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x84, 0x7, 0xffffffff00000001, 0x1}, 0x1e3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f00000001c0)="c5", &(0x7f0000000280)}, 0x20) 08:41:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)={r1}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xac00, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000300)=""/92) [ 425.231399] binder: 16848:16852 ERROR: BC_REGISTER_LOOPER called without request 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xd00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 425.287526] binder: 16848:16857 got reply transaction with no transaction stack [ 425.318000] binder: 16848:16857 transaction failed 29201/-71, size 32-8 line 2741 08:41:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000001c0)="1edb281c01ea4b8d6e57eaf507e240a4267243e29139555e955184b60dcdeb9c49ed3465b13ba5d6dbde738a982125f26da78c4db88859a932be933651959b36a758c501fe33a27f478f17d0576f4dff66729131d534b12441dce08c47aabbb253177dc3cf514b966cb585f1cdfccacdb4212551d4c04a1454fbbd6f0b498657f574d28768c72dbfcdf6d38a2033aeba177c725ad98e77746f8702b0be5a8e19df59f54a58ea25f3f09753088d5666997313031f7d1e8dbdeb9f10e7b6bb803f") sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x121000, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x1) 08:41:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x1000000], &(0x7f0000000100)={0x0, 0x0, [], @p_u8=&(0x7f00000000c0)}}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000080)={0x2, r3}) 08:41:32 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2f00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000002c0)="0a5c2d0240316285717070") bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f00000000c0)={0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, "c95d9d47e4635c995b18ba766a818648cd01f2e3825bee3eb373769cb2c85d7f0bb3aff58d31b0352895601ee239883abfad45a0e8c0f59bf3b52edf3500bb"}, 0x60, 0x0}], 0x1, 0x0) 08:41:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x301000, 0x0) fsync(r0) perf_event_open(&(0x7f000001d000)={0x4000000002, 0x70, 0x69f, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffff84]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:33 executing program 5: getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1b8) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x618880, 0x60) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1f) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x1000000, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bcsf0\x00', 0x10) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast2}}, {0xa, 0x0, 0x0, @loopback, 0x100}, 0x0, [0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff]}, 0x5c) getuid() [ 425.765549] rpcbind: RPC call returned error 22 [ 425.776862] audit: type=1804 audit(1544085693.275:67): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir389586251/syzkaller.CyrADO/323/file0" dev="sda1" ino=17747 res=1 [ 425.816004] audit: type=1804 audit(1544085693.305:68): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir389586251/syzkaller.CyrADO/323/file0" dev="sda1" ino=17747 res=1 [ 425.842152] rpcbind: RPC call returned error 22 08:41:33 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x18cc3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40042, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x6, 0x4, 0x1000}, 0x4) socketpair(0xf, 0x4, 0x3, &(0x7f0000000080)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x111000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$TIOCCONS(r1, 0x541d) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80003, 0x2) dup2(r2, r3) setsockopt$inet_int(r3, 0x0, 0x400000000019, &(0x7f00000000c0)=0xffbfffbffffffff6, 0xaae36e3cdf4b3a7e) setsockopt$inet_int(r3, 0x0, 0x50000000000c9, 0x0, 0x0) 08:41:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:33 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) syslog(0x5, &(0x7f00000001c0)=""/246, 0xf6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x700000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)="7663616e300000001600", 0x10) sendto$inet(r0, &(0x7f00000002c0)="ad", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="df", 0x1, 0x4200010, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x400) close(r1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x9, 0x7, 0x9, 0xff, 0x5]}, &(0x7f00000000c0)=0xe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r2, 0x80000) 08:41:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)) [ 426.033241] binder_release_work: 13 callbacks suppressed [ 426.033246] binder: undelivered TRANSACTION_ERROR: 29201 08:41:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3f00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:33 executing program 5: r0 = socket(0x44200000000010, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r3}) io_setup(0x95e7, &(0x7f0000000100)=0x0) io_destroy(r4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ioprio_set$pid(0x1, r5, 0x0) write(r0, &(0x7f0000000200)="2400000024007f8000001200000001000003f6ff010000000000f3aa000000000000005c", 0x24) [ 426.121680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:41:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 426.207194] binder: 16908:16922 got reply transaction with no transaction stack 08:41:33 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf401000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 426.250152] binder: 16908:16922 transaction failed 29201/-71, size 32-8 line 2741 08:41:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000040)={0x7ff00}) 08:41:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfffff000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:34 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x7ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x3f}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x12) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r1, r3, 0x0, 0x8000fffffffd) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 08:41:34 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x100}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0b00000044844ab9cde9a50bb116d96a53e265d692568cd780672b8b916bd1a40a212f2a9c519c6a706abc1f77ac0ed8b4db56ac2ec544b5d9bbbc4cb493e1c342b266a5f8858f9363b0fc25ffe8bad2aed679c095465e46719e7ba4239b9b3b61bfe06484b1988e777571f26aeafa94456e9f4b8e9e8a78893da055f025fa494e4bca1f6404059451f8278d577c0ed99dec93768ce31103ca93208c69d136f08a2baeae9735a4a2c9311c4ce031c807886a15"], &(0x7f0000000440)=0x13) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80c00, 0x0) ioctl$TIOCCONS(r3, 0x541d) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x75c6d89}}, 0x2, 0x5, 0xffffffffffffffc0, 0xb6, 0xe45}, &(0x7f0000000280)=0x98) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000400)={0x2, 0x3fc9, 0x97, 0x6, 0x357, 0xac}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r5}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 08:41:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000380)={0x0, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x2, 'client0\x00', 0x3, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000240)) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) 08:41:34 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf0ffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x3, 0x8, 0xff, 0x8769, 0x4, 0x4}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/4096) [ 426.937566] binder: undelivered TRANSACTION_ERROR: 29201 08:41:34 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2900]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 427.125414] binder: 16961:16968 got reply transaction with no transaction stack [ 427.131141] audit: type=1800 audit(1544085694.625:69): pid=16962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=17769 res=0 [ 427.140061] binder: 16961:16968 transaction failed 29201/-71, size 32-8 line 2741 08:41:34 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) clock_gettime(0x0, &(0x7f0000003840)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f000000a2c0)=[{&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f00000004c0)=""/28, 0x1c}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000000780)=""/74, 0x4a}], 0x9, 0x0, 0x0, 0xc6d3}, 0x4e5}], 0x1, 0x2062, &(0x7f0000003880)={r2, r3+10000000}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x40, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000840)={@mcast1, 0x0}, &(0x7f0000000880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000a00)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/130, 0x82}, {&(0x7f0000001b40)=""/50, 0x32}, {&(0x7f0000001b80)=""/198, 0xc6}], 0x4, &(0x7f0000001cc0)=""/134, 0x86, 0x7}, 0x3}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e00)=""/56, 0x38}, {&(0x7f0000001e40)=""/106, 0x6a}, {&(0x7f0000001ec0)=""/134, 0x86}, {&(0x7f0000002000)=""/135, 0x87}, {&(0x7f00000020c0)=""/105, 0x69}], 0x5, &(0x7f00000021c0)=""/4096, 0x1000, 0x8}, 0xfffffffffffffff7}, {{&(0x7f00000031c0)=@nl=@unspec, 0x80, &(0x7f0000001f80)=[{&(0x7f0000003240)=""/99, 0x63}, {&(0x7f00000032c0)=""/246, 0xf6}], 0x2, &(0x7f00000033c0)=""/167, 0xa7, 0x81}, 0x1}, {{&(0x7f0000003480)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/198, 0xc6}, {&(0x7f0000003600)=""/16, 0x10}, {&(0x7f0000003640)=""/42, 0x2a}, {&(0x7f0000003680)=""/97, 0x61}], 0x4, 0x0, 0x0, 0x20}, 0x62e}], 0x4, 0x40, 0x0) recvmmsg(r0, &(0x7f000000a0c0)=[{{&(0x7f00000038c0)=@xdp, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000003940)=""/3, 0x3}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/227, 0xe3}, {&(0x7f0000004b40)=""/213, 0xd5}, {&(0x7f0000004c40)=""/168, 0xa8}, {&(0x7f0000004dc0)=""/196, 0xc4}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/179, 0xb3}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/37, 0x25}], 0xa, 0x0, 0x0, 0x7fffffff}, 0x8}, {{&(0x7f0000004d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000007080)=""/221, 0xdd}], 0x1, 0x0, 0x0, 0x7f}, 0x3}, {{&(0x7f0000007180)=@alg, 0x80, &(0x7f0000007440)=[{&(0x7f0000007200)=""/14, 0xe}, {&(0x7f0000007240)=""/12, 0xc}, {&(0x7f0000007280)=""/229, 0xe5}, {&(0x7f0000007380)=""/92, 0x5c}, {&(0x7f0000007400)=""/5, 0x5}], 0x5, &(0x7f00000074c0)=""/13, 0xd, 0xbb4}, 0x3}, {{&(0x7f0000007500)=@nl=@unspec, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007580)=""/8, 0x8}, {&(0x7f00000075c0)=""/202, 0xca}, {&(0x7f00000076c0)=""/78, 0x4e}, {&(0x7f0000007740)=""/148, 0x94}, {&(0x7f0000007800)=""/100, 0x64}, {&(0x7f0000007880)=""/54, 0x36}], 0x6, &(0x7f0000007940)=""/83, 0x53, 0x8}, 0x7ff}, {{&(0x7f00000079c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000008c00)=[{&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/59, 0x3b}, {&(0x7f0000008a80)=""/199, 0xc7}, {&(0x7f0000008b80)=""/14, 0xe}, {&(0x7f0000008bc0)=""/59, 0x3b}], 0x5, &(0x7f0000008c80)=""/177, 0xb1, 0xdd8}, 0x8}, {{0x0, 0x0, &(0x7f0000008e00)=[{&(0x7f0000008d40)=""/192, 0xc0}], 0x1, &(0x7f0000008e40)=""/4096, 0x1000, 0x7fff00000000000}, 0x2}, {{&(0x7f0000009e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000009f80)=[{&(0x7f0000009ec0)=""/94, 0x5e}, {&(0x7f0000009f40)=""/4, 0x4}], 0x2, &(0x7f0000009fc0)=""/249, 0xf9, 0x2}, 0x7fff}], 0x7, 0x10100, &(0x7f000000a280)={0x77359400}) accept4(r0, &(0x7f000000a380)=@hci={0x1f, 0x0}, &(0x7f000000a400)=0x80, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a440)={{{@in6=@ipv4={[], [], @multicast2}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f000000a540)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f000000ad80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000ad40)={&(0x7f000000a580)={0x544, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xe8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r7}, {0x174, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1080000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x138, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r11}, {0x4}}]}, 0x544}, 0x1, 0x0, 0x0, 0x81}, 0x1) r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff6e, 0xc0000) bind$llc(r12, &(0x7f0000000200)={0x1a, 0x31f, 0x7, 0x6, 0x20, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x400000) sendto$packet(r12, &(0x7f000000adc0)="76168a73f5", 0x5, 0x4000010, &(0x7f000000ae00)={0x11, 0xc, r10, 0x1, 0xffffffffffffffff, 0x6, @dev={[], 0x11}}, 0x14) 08:41:34 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffff87]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x3, 0x8, 0xff, 0x8769, 0x4, 0x4}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/4096) 08:41:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000380)={0x0, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x2, 'client0\x00', 0x3, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000240)) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) [ 427.607819] audit: type=1800 audit(1544085695.105:70): pid=16995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16721 res=0 08:41:35 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000ea0000000100000000000000000000000000000000000000000000000000678a637242d39908d88aea3700000000004ee4202c22b6599800000000006217c67e297c3dbb569fe97d8d256c4f79216d3bfc0c9aaac3e60327a21b000c6c6b4eda6481093291923f4a79e2c3849e4608bd39636bf7f447a5aad98700760a429bb2ab021af90fe664bda1824ed2557640e235bba385ef17"]) 08:41:35 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000000380), 0xff40) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x8d17, 0x59bb}]}, 0xc, 0x0) uselib(&(0x7f00000001c0)='./file0\x00') sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x240080, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x9, [], @bt={0x7, 0x20, 0x9, 0x1f, 0x81, 0x6, 0x10, 0x2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7, 0x0, 0xffffffffffffff9c}, 0x24) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x3a8) [ 427.869033] binder: undelivered TRANSACTION_ERROR: 29201 08:41:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:35 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 428.005642] binder: 17005:17011 ioctl c0306201 0 returned -14 08:41:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) [ 428.051009] binder_thread_write: 2 callbacks suppressed [ 428.051022] binder: 17005:17018 ERROR: BC_REGISTER_LOOPER called without request 08:41:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x41) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="a4afbde4", 0x4}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) 08:41:35 executing program 3: io_setup(0x800, &(0x7f00000000c0)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000011c0)='/dev/vcsa#\x00', 0x8, 0x90002) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xc0, 0x5, {"19182a9a47892e015b4a2afe9061443d1f5f5583ceb9e358f8094029174ba8ee589d4e6ae885cd3a00eac2b1da65ca2ed2377e1f38b102a27a6c9714b65c49afe7ad407470953b9dd1bc065c72a69380ddd2e5d98ccf1ef3d73f658e77118bfb684d1bfed52d673df59ee390f0582eb5c02aac6d2b016bba6c07f370fecee9c8fa06ff624d48b7e5edb02cdc53ee7e91e7c34507eb5b494119e1112b2d09414ccc536b2c1cd4a7e1"}}, {0x0, "814fb67de4e82400b0091e931831a0dfb235ab15e600c32ab95e2e1d698e8287012e20c2c8ad002148f690f12eb5537177fc0745cdfe2f4cc11d55f363e735c316225c2c51aced9f217b1ca7d2052daacac77eae8af1274745d94adaac8d080ff9d55e2e7ecf21cd460563aec9c767392f69aca6487c3593e75f80e9c2c1e230404631784f4e472f394ea767d8464eb26cadebd3d0c007f5b4d31462b69775f2c5945d3116"}}, &(0x7f00000013c0)=""/181, 0x167, 0xb5, 0x1}, 0x20) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm-monitor\x00', 0x20000, 0x0) io_submit(r0, 0x3, &(0x7f00000015c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0xf, 0x4, r1, &(0x7f0000000100)="6fe0cb21262c5c", 0x7, 0xffffffff, 0x0, 0x2, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x6, 0x15, r3, &(0x7f00000001c0)="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", 0x1000, 0x4, 0x0, 0x0, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f00000014c0)="ef23ecffae8f0d7aefb21a88f404b9006ee287dab96e68471daeea7e8eb0477464cbcab9419a649fd613c82a806aa7826c83548772326a0bf506dfdc1af59ffcffad09a932bfbd061a11616ba0a37a80e32336d8e51f42e443a57a0a89726eaab0ba5d2baf91e59c4b3b1464635fe00986f603f48403", 0x76, 0x50, 0x0, 0x0, r6}]) r7 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x80041) fcntl$setsig(r1, 0xa, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000001600)={0x2, 0x5, 0x6, 0x5}) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 08:41:35 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x9000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 428.150407] binder: 17005:17011 got reply transaction with no transaction stack [ 428.180122] binder: 17005:17011 transaction failed 29201/-71, size 32-8 line 2741 08:41:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x2}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r1, 0x5, 0x0, 0x20}, &(0x7f0000000300)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000400) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x0) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc08a4f2, 0x0, &(0x7f0000664fc0)={0x4, 0x12f1, 0x6}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x200, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000180)={0x600000000000000, 0xd000, 0x4, 0x7, 0xd}) preadv(r2, &(0x7f0000000180), 0x202, 0x0) 08:41:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 428.280844] binder: undelivered TRANSACTION_ERROR: 29201 08:41:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb6f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x56f5}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[]}) close(r3) close(r2) [ 428.394220] binder: 17038:17039 ioctl c0306201 0 returned -14 [ 428.410995] binder: 17038:17039 ERROR: BC_REGISTER_LOOPER called without request [ 428.470914] binder: 17038:17042 got reply transaction with no transaction stack [ 428.510610] binder: 17038:17042 transaction failed 29201/-71, size 32-8 line 2741 08:41:36 executing program 3: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000002740)=[{&(0x7f00000003c0)=""/4096, 0xd008}], 0x1, &(0x7f0000002800)=""/88, 0x58}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x16) write$P9_RRENAMEAT(r1, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0) 08:41:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1a0]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:36 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x1b5, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x311386271b60545, 0x40002002, 0x0) r1 = accept(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000280)) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x247}, 0x1, 0x0, 0x0, 0x8080}, 0x800) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ufs\x00', 0x2000, &(0x7f00000002c0)='\x00') ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000080)=0x6) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x180036, &(0x7f0000000500)={[{@sb={'sb'}}]}) 08:41:36 executing program 5: r0 = socket(0x8000001c, 0x1, 0x1000) bind$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) 08:41:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2c000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:36 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x100000000000}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x20000) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl(r0, 0x4122, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='tunl0\x00', 0x6}) 08:41:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000000)="e8ea69506122d92ffa9cf0bfb99c51d8b54297177f5ddeb5323b35b2a7daa131a4b198205212a3932de67b189849d5390539aa0531f2926f1f9f25011e1811aae36fa86c035f03df701d565cfe109eb6f5816c56d0dfd770bffdfb8366f71116a3732092bc600f2ba490771b9f8d55b37739e402810d6f7ffae4949e09fe86a0de53143a731ebc116bafe8ce49657a4a33061873faff47ff142c24d5a5155970b66b54cf563346d1e9a81d01a9ef8f967193592b654b5ed60c1a9301bfe903d40b860ca6367df264f8ecbe9eb8dfb02526481b2e846fa9db255eac088c709242e090fa0275e242b06afc"}, 0x10) 08:41:36 executing program 5: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xed, 0x335800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) 08:41:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:36 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x101002) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x83, "f0b83d907c39995719dd44e8ebab7420d1007cb3d4227bc600ae576afd936d35314d0bc54c69b2878f9b7f1d192af62d631e940ff8ae3364afa2f9dd806171ba8fc3b2fc1dd4998d95322364d426c5376d25050885dcc34e96a86cb6240ad2c918371a1829c742bd2788cff6017d2a6079d040cb8caa0bf3e0bacfaf80ba102ae21590"}, &(0x7f00000000c0)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000094b67fb3bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) 08:41:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x8000a0ffffffff, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xc000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) 08:41:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 429.192697] binder: undelivered TRANSACTION_ERROR: 29201 [ 429.262961] binder: 17093:17097 ioctl c0306201 0 returned -14 [ 429.273715] binder: 17093:17097 ERROR: BC_REGISTER_LOOPER called without request [ 429.311973] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 429.319802] binder: 17093:17100 got reply transaction with no transaction stack [ 429.321355] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 429.328151] binder: 17093:17100 transaction failed 29201/-71, size 32-8 line 2741 [ 429.340229] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 429.354574] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8847]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000280)=""/45, &(0x7f00000002c0)=0x2d) socketpair(0xd, 0x80000, 0x9, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1523) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000180)}, &(0x7f00000001c0)=0x163) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'gre0\x00', 0x5}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}, &(0x7f0000000240)) r3 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="95f58dcf4f802c0eb3b4b85e282187f478cbba70dd77", 0x16, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="040000008098b1b7bafcd423f7312f658f5bfef1f2bd69c08fbc0d18d4d6503522ba9fb71f18dc5f836530a657df04d7824da401aa67c583e423d91a3d1b40ce6a95a060fee15c6d75969bf2e18966c75b06038eae9665f97c81f64af4992fcf9e03d3e0e01c4b61f00345f085bf40bffb1325af9962e93992a3f875173ff776b4b7e6cd43c3aa75e563007e4cf52b0485eae1165ee70e6f609d8312d642a5934592987b0faeb80d877f1ec8e16e2ed6992b6f04b5d23b670000000000"], &(0x7f0000000140)=0xc) 08:41:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x9, 0x2, 0xffffffff80000000, 0x8bf4, 0x3e2d}) timer_create(0x7, &(0x7f0000000200)={0x0, 0x24, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0x2e8, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010003b0e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000e2294292d16445a6b00000000b00007a5fb42f9d6da0f6fd471800120008000100767469ff0c000200080003c0e0000002"], 0x38}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x22040, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) setsockopt(r0, 0xfff, 0x1, &(0x7f0000000340)="0b425bc28bb697004218bb40a30abbb1bea980a244956cd7a25063dce5ca19c27bd527020b5d339f81c6c1397143d9b889e976b9cfc0e5b5e502246109307a233ef01ef9bc0cbb343ab71934e19aff522f2a88f3fb2d1d28f9da38474199748a194f06c8e4d671ddb2182a2c569b13f980aaed4361d6e542d8597568c4978e5b", 0x80) 08:41:37 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) r1 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x5, 0x202100) r2 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x80000) iopl(0x401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r3}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x6, 0x7fff, 0x200, 0x8, 0x1, 0xad65, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @empty}, 0x6}}, 0x20, 0x2, 0x2, 0x100, 0x4}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r4, 0x9}, &(0x7f0000000440)=0x8) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) bind(r2, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x2, @random="ea92a4b85b3d", 'nr0\x00'}}, 0x80) 08:41:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x2, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="59000000140019232b834b80043f679a10ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x59}], 0x1) 08:41:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000006112440000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfffffffffffff000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 429.728524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor0'. [ 429.783741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor0'. 08:41:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="dd1b4efb6b6c43bafba7fbb8bfa2ec7a81dd8397cf78d6b81a3366f1b109145d8b27f11bfedca78fdb44f1d8e86045119996bdd16e0896a792ccb93964eb538c723808f2131c8c0f722215fba282c182b329c98afae1721d6d770d8f9ea8647b5c409d79714c98b7b9bc6a7eff0d1ea66c67b099e98643ae362ab7d243956e14c58581b16d00eaa0d702a109f05b28284e7da1521655451b365360039f5ad03220763d682ce2533931319f44a9b421"], 0x1) fallocate(r1, 0x0, 0x40005, 0x8000000001002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 08:41:37 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031ae85717070") setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000180)={0x3, 0x0, "bcd2324f3bfe50efe97ef7f3a4f0c91d0e5216d450457de0", {0x3, 0x1}, 0x291}) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001940)=""/75, 0x4b) 08:41:37 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000080)=0x80, 0x800) 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x608]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 430.053804] overlayfs: filesystem on './file0' not supported as upperdir 08:41:37 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff8000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x800002be, 0x40000001, 0x1f]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x410000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4003000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r4, 0xc08, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) 08:41:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:37 executing program 0: socket$kcm(0x11, 0x0, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r1, 0xed, "e94befd68d8714929ab5c4dc6920343b264af4e14b6a861cd1f3907b73befaba7b943f1e7c5b867c913666860f1915b430948ea3c3c78422d5efc32e729641266f6b48aefa496c2f0bddeb76c4c3297cf00ec719a8dec706dee8e8c3a0442c6778ec27e47376a03eb75d401a1e69df06c4917905cfd9f5a0983c7a6a66476099c700f851ea8bc111efb14f16729d9d44dfb1c1933d559baad1c926d879bc8837883b1fc5ccb18e3f62eaae6ff0301c69a48bc696ee739e9ab819ea40cb048a59fd3daaad33b45846f6abcd20bf796fd3d2e7f0d75ed54a13349e3964e3140c5d9f612c756f1df6697adbd483de"}, &(0x7f0000000180)=0xf5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) truncate(&(0x7f00000001c0)='./file0\x00', 0x180) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="743d7d516f5b0e95d39148531a93", 0x0}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 08:41:37 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = dup3(r0, r0, 0x80000) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0xffffffffffffffff, 0x1ff}, {0x3, 0xffff}]}) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) fcntl$notify(r0, 0x402, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x23020000) syz_open_pts(r0, 0x40080) [ 430.104130] binder: undelivered TRANSACTION_ERROR: 29201 08:41:37 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xc000, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) [ 430.205614] binder: 17157:17160 ERROR: BC_REGISTER_LOOPER called without request 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 430.251962] binder: 17157:17163 got reply transaction with no transaction stack [ 430.261862] binder: 17157:17163 transaction failed 29201/-71, size 32-8 line 2741 08:41:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x64000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:37 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x4600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuse(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x3ffd}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}]}}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x2) chdir(0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) 08:41:37 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x5, 0xa4000) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={{0x3, 0x1, 0x4, 0x7fffffff, 0x5, 0x200}, 0x3ff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=""/16, &(0x7f0000000240)=0x10) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:37 executing program 0: pselect6(0x8e, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f00000000c0)=[@enter_looper, @acquire={0x40046305, 0x2}, @dead_binder_done={0x40086310, 0x2}], 0xb8, 0x0, &(0x7f0000000100)="d8ae3dc848d43402405348dfa41c7d60c3c3568867a86e775056aed157f96aae258b1f42068a9db97f8d93074b85fe8af04a58510fc4a340785bf391b221748a14ad58cebfc4abcc715dd184ecd29e2a273ff05f796e800cd687624e5aa232bd799aeb4aad26a5dead658a8b3e787cf278545887f7bfd157e2d5631cb657a1ccb326b1f7218af7541ab2d625e79393ce3528982b1e6d5d1ebf60ae5e0422f3eaeeeaafd0225cd3a32e7b8f491575c66bced14572b23d8bb6"}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x1, 0x4) write$nbd(r0, &(0x7f0000000200)={0x67446698, 0x1, 0x2, 0x0, 0x2, "905e1eede8cf6b1eb778"}, 0x1a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) 08:41:38 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8035]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:38 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r2) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000540)="3a7fc944137d68d5f6d38669af35957aa4f5515731c7750d510af3371916a28b293cfb37be199a61b1f921ce6efe7c080d8c7b3b63f3972fa32d0fc9551a06bc8641eda9aff36a33b5ca84760bbe15562dc4d8272882582eb40c92ad22a2919a7dba4e20a5ede0dceb79f3638660ede2038aa3074150381f94cb160cc9b8267709002bb2e95d2030949c1e632868537f714e3a08b8e948ae5ba52f1bbcc5712aefbe1da97f10a2f69b9f37613887cd0722aab1c4ce8aaa679ffd935fed34dbf3e40cd99043d502546e2d42079bc672366dd4237acae088cc7ee8045cd551793f92eb2f5a50a64f83368054d1321c9737d7eef881fe9449f82aaba0c143db09db78412a2593363ad3419004ca917ff0b523e4ef1534ca0c9cd8cddde0b7c9dcd8c9fd19f6ab375fb41784905fd0ddc57b2cd1a287f527d1720feec169a3a300bc5b556c2058e1535bf2fab57672c3915713351244a319a18fbfd50d8a00a97794e4c1cc23ad270c49790d5da272c5e309f5704c01411a77f58a4347b328312c5f3fd40f8fdadf7b5f5e842b907b4ac4fcfe6b4e85551b1b99ca7fe6cb89cd4701e4fbda798135dbc003b32d27db8d1c53ff53dbd40020dc561d4d9758ec30dbe8baf8cf99576159e08f3828b1cd4a539b53936bdeb236c0f13f1dfe64646e6aa0b1fc1d39f0914b569dc45ab6996108d379265ee25de516794b7ac272245e6abd0bf984de1e8c18bbbf3391fbf80c6618b385ece66a1d6bd45b183a7b487d8f1a08d19d864e0dcd8aa7692bfbce9f9847f7807671d52789ebd46d219de73a9404d0403803ce3025c9693a87102e090e6a82beb6627aa5f241c27918c301f021ccd6dd7a25c20bef9762453ebcc096241c8a3618fdeb22345e536c4477b814510c46f0a70a1adb7b28eeab11b6b1a43939ebbb107382710e1f8c6e4e81aa81074b3deb15fe79bf4fd1634ff6f28a9f2474c5bc2302fbd9638fcd956150c96c289a0e4e7480c1e1fdc8cf11b11db9d912df735d0010ea8f81edaba645f269f3c25c9b7f46543cd267548d5d8126ccb8eedcefec04d6223840a7fccde0177b0a8bf89297cfdef3ffdcb21982dbfbf9f2668c68bdbd5269c9f4b8b852937f2fd3ff4b258c152fbc6c72d9029e20d541bbb4fcef2c4c6866d7d94c73abc6014d47de2b3227dbc61824aabf6b293f54ba7e726bf2c8c13798172850740afbcaec38e486abace34998b47834d1c743a942f1a645b0c6f2aef0cea8c8654026f5859c6eed19a42cc4354ad74be2e4cb14547e8f7edee9789d32ec4e8a17b015b459b260958f57db6854d5cc011942e5c0443cd91a805030b8171a4f0ea671d9f69b0134093692e0d0290823dc9c2b38d416ac761d0a5a4fb59a38d7870b17c4d94ee53851b382eddaef66efe072d736c03c2df0c0c8ea059b70576c32d474290bf413b9d2d8c965850cfef9435b29f4bba5985e8a4b6d6bd0fecf55f900b0dac72bd5db2085375715b4c2a983f0e10360ca836e53de906bc8667c5db1f700028544ac5c66f80c653cf9b22d7611ce615f63551b5752900938ac2e9ef63a2d9c63b2243c7e6477a7e0c3b0d3e7840605f4d75251980c98934e670389d44d0c428c27d10cae164d4c41bbbe594f31913bf5951ee4666e8f1601ebbe35acb90481b34fe88260bf16ec46cd58b5b8c59ec044be681ce35345b9560d46178f7b3105e6b16608aff7fa76f3c406b2b154e52d9a8cbf1ebf3f4e90cbf35d667648e0a2f1e867b9bc0eb2656a911661c6331dce757e881f230cc4f5704bfe857b4ec058e14143782eabdde87e5bbf28d081ca66b3ab19887f8ffbcc615f6f8dc6d9bd79be28cd326cd9bfee2cb2fc97250bb1ce94a13db44e7e854841a435b0552a35d36c548cdf0ad224e4a79aced0eb0f7927cf3d32884c53fde388743a5a2943f1e5dd6aee4dadef216efd3888e1b7781528965518b0a43c22c911aab7688c3a178635c8d79d762522c74fbad9dd8b726ee18447dbcefbdb63b6b318940accfaf793893c7349168d49562e26967ea0d5f8583b31c2547529814d845df5a82ac2c169ac7ca2eec890378f510a867be856beda48d757abb975eaa967c26dce18f17bdbb336fbad37636b13c515cba9495a14f5f76f78e698a586509756e0a1787649d22828df1dae7be82c494618009ebe33819d1d1a5ef97edc960098aacdcf415bc102b5e022be1270ccf66a824c2af211918f6b9eeb3dc6297589658984a33dcf8b1d7ad98e68d06c5f37a79316232c60f6109a444ca8f5d7c054fe0700a55f39851be2f7056116b883ef866d7db65338ad8b76c879991b5af26dcc8d82e16853dd536b303836dc93377ed3543b596d3d7750b9362a7c0690ea2ecc188bd58b75f32530a441c708409fb065460b1b9b5c57f6de58cb9ca79782025dc58cb8ce725b0a606e41b9ecd061113531dd2c31c8b641ffcd3bfa602385f755935bc8f4984b011ae406c207c22b65251bbd00a92d7070d11a621bc7796dfe844b77624ddcc745dff1d8a5af92cd1def0c986617378d909044c271f4343e3a905da77bcfc319320325ca56f4f5cf5b074b5c22b46ef54ec2d49f610da23bc053d0f9950a94027af7255bfaf02c93079fc64fb7c10b4509a599fd9a2cc6dcab362d0f64e4854138541372f885de561b1427d78270c6ec30356b76955de21ae25f14345773ccf6d558a93552590a87a56a64b38d9236e77e90207fb7bb24d5dcb484a9658f41aacbdd9941fca0eb3785fc9d039a4fb3443157b9f094c4ebc914eac0704f0d8039c2e42b05babd1694ba8b3e7c05cef608b12311127ddbb6e10cc99dbd1744b7fe7e189c44601d277340d1331fce37d61c92dde8dfe125bd7544f930e8b8f83db6ace41b31f0651da8939503eb4d5aa618f90833670126fd172b1398365b2881e40a337f0c52a9848648c10b46fe3aaa0cf189afdf3f409d5c91c8d5634e9d90212c49700b03cc2067518bfd1954a9008b72f3ddbe018140c3eae7403fc60093336de8c3487882590f23c336cbcd9865225f52b20cf1d51cdeefc6e1f718dd31c9a211582a880529d88465ab3e2669055c627344e6fc7bcf93ec2eee08f05d1e5361581e884f231a5b7d6fcaa7d6c6855245102a4136d46140368cfd4263d3d4ce27285d1b064d47da50816876c387ba0caf8a5dc52115b08461480e1fe458ac4a73e25c47ee101334b56004f72b55bb08b8b542184bf007563f585c09ab432afc4d361eafe722c46ddb8a054c83144f339505afb7d987e720055821bcb9bfb6b1786749ed54d2870f4c5cf1c56724dec2e3d76e7a6c752e7cdcdc1cd43b9785ac26d59071e6026c0281ad85d50d7b0d00f347ac8bd37c391fec9c025f673071466b63cb826d934e5eb3f680a756fd8e24c3b2aa343dadc0939f816bb29b91b29726841d0901e6a477e53a2203ab87d27f8c76b0b9382b41ea2c555e4049bb6b7f5387cf3ed7280fd633b27ea6c9fba227f9fb55b9b51500c592aa7f2e8c5c07bda6588222c6142a7d545d637fb22ac00504939ff278e8682a3a64b6bfe9907e906458bfb01e2b9c55eec6fb9bb21b3f2bda9461130212e5efe8390a6a866d0087e551f63fb936278c53dc5cf7585e885c540727b373d3ebd8579bfb5459044e1118c10b6a75ef1ca1ac44d5268bb0c767d48979c6c90ab394d8ea1908091f235ddb801cce9794e96e4d10fceb0b11b418890eb57197a377b1fcb1953dce4a32bae40f789cf0f124cdb4ef884fba0d496a4e9fcbcda86bab79724c2cdcd0d7e1985843befdddc1340954abc769ec469da321d5645d4a9f423640bb9e70a13ba9fec9fc82b38658939375296eb2ea4947dd723145d0bf18ebf9be73f144a75d2f1010bc43ce3b0e252389c9764dc7f17e6610596573f8e3f3194336547c5de4f463165cbd28f7a1c1ec90e5a2dd28efece004a93fbb2cedbf8884ddceecf9d06fa183f91cb1361d6e635fb3e1e1300cbf45980f922d131b765d18501fc0cb2c2db084b1222d01bbae3b5ac011bedb1410fd9c76862c7f26747deaba63ba7e37fa3b4a30d168d7dc3f69f4dde1455ec527db121d9967bf9eea28c7a919a72e360d014fa8be9d935c11533c01fd19521d7dc7bf94c75123d7112a26d5ab420f70bfc1d1978c1f9f307af8d563119400ae9ac570c6bd2b720c3d11e67180020071f2c479b2474a5fb6a1c4e4c691abecae3c9c4575885630c0787f307789d5e35c8fb2413eb3b3640d769fef3f1b48423581f3c2bbf1807cfca2c5a4f47b11de7989a5eb2d62665a9d5ad854653a00032f6380dac716f553398bee41ef26ec98946f4067d3e717e33cc4f23a038398e89cf8689cd9b3d1c637e3010ddfe26e3d38c9659e1a3258423e98cbbb7cd0d1eb8b31314324a39a1669e6e8a0117ffb4e59a475565c26a4581b7c6244e55616d5be63d5cfab44d37bbdcc28a3ff4768b25e4d0d2c095d529de72a3d0523a17106b7926108765c31707f3569ee3755571ea02f9688caff3d414079be6efcfc36f2d7d8934b4b5d552953c453e2ef6b1ab3230b75458c9554bf5c7a8b21e25c8b14b5897cd22e23deeed7689e757a045ff51f6821acbe117847548e2c6eb8c743e32cc6dd520d0c5c1f0f87e8eb1c1beb2024cdd93681b8cf42b005f7706c5e67587c1dab7a4f8aac069cd39b94f2d6db3cac2e2d7d5c7b9d4ee6cc0118b0a11135e072e271ada3a72fcf3583662c482af517ac0924e0a8eee0ec5a6cca832ca95fbc9fdabf048e2a3c3658db0110f82db6dfef488e004c9b3cd85676ce43eea7eb3b39a91e9617529217a4004013d24fe74460e7cfec5c7af1e9202bdb85e0787471a4e51dbe36716d1444438e24e46c9e336717122ba35ded1ebb902900f6316b2e9ecb0c0ef67f63b5be6378d2b67b6eed1322c41db4353268bcb930c434cae0dbff1e93def355f2aa8542343a8a8bc122b6d92590ccb73b002aa4a07393567c73e627b574103550597fb5021afbd7b4a2ee9875de2cab8c99075c4bfdb11c9abae93da0f3ac2bdb80c1eb68f06f5fd94b40965dc19aea63a760b861259dc289794973a205b2ab5dc666fc79a286856dc592b320256107b5a66f25c281748a5f770a6fc5166024eb82b1ff6145950b22e9618b08216be8c7970eac413b11fc5c1960c90fa4f6a0d4c8c69865f52f873c5a7ca17c06adfb8f560adf04c3abbaebe0acfdc082bd23b2d5eb2d0abdf31eb13ed742004f1779af06df00c05ef6cff8cf65aa3bb6c5bac7d4075ba1a9fc458a10a4f42732b34f9adf180249cfe88b3ad1c3e2ce08f02ff2fe9060b9772de7282de82b27f031913c1de88a66d5ac90425484bf4f81c23c36706919dcf6cab2f7ac096ff2b5b15276ca17edb1ff51eeae8d363ae4d33456ff51ecea4cb7186440a6302fca36476b87560be3cec57c841463c713c580a089c1cb46d632668493e1f29af632b47dfa00ecf3d5b541e669b134a3e4c02c8180173c8f5b42de6d94af2d5141f07de5a3d4f179226cbfaced883f94dcdb92cd71859b32a39e17164da98b47dd258a414587a0c9df4907066567ae3ced4f20aeddcbc4d9700b4ceea1d298ead1dd68719e100d42b5b1376652da501996468e7a53af07e1e011b98cacafe717f4ab885201921e4ad59e9051e780c4bac38b3f8545663fe058151c1fd0d09ab892cf2b83e219122a6ce599f0a158cc1205ea5e619fa5806176ae4a424ac4aa6b96eaf3dfb05bf1009319d22736e09577157ee8341407342e90bf687abfdbc1b0fb57980867be", 0x1000}, {&(0x7f0000000100)="ae8081f8403fc4c30dbd8b3a160d983f1e58513ea6ca3ceca49138db89", 0x1d}, {&(0x7f0000000140)="4ac6bd0107c819506a42eace547fa1f6efb0189a0ca0cd19c3edd80e1a1e99db58f3fa074f996bf2349ca9c12396dce213db1e8638c9d6f19d767c3019e65494c83cdaa0c7f3ffe9e2d8369f0ced9d4281cf8d742bfa625d12b12763833bea9cf27fd64e19dd07afe73e8d5c20c10ca3fa4642883b3cdc21b8b27742eabeb4231b22b5e9c60fb02799a22826ca59b6b0cacd178d42fd6636ca383b149c711ee41cc0d70bb17d9779158d4f35b704403529d8b8a1e0300f125501d711a5848121d5a51a3a1a2a54a64dafada684624da13c1517b247858a9f483238cff42036775fa8f4b4919f", 0xe6}, {&(0x7f0000000240)="48c7fa66", 0x4}, {&(0x7f0000001540)="95db68aa26286aebb43f4ec758fe97ff15cae894922a8a8b6e67ce6e4bf3044cdc1578b4ad11380c051b9460986b6c53f5409ec72743dab1ecf843d7600708e59270583aad7fc835287c0831172e7aaaa88f5f33e900dc9b723eff3efc5fbc86fa4dd0bc9261e9319e60d3368c00c2528367393fa9cede238a94313ea012962c7a6014867b6b1ef82dcde1614d9ae37963a733cac8d018b7b48523fdde1c61533a32705f740decd6b2dae7afc79339ffb8d1337e3b7eeab656781607d976e229300b62a9a39b4e74e2862b5f43f9b9f16c8f2b92f2f9c756a1d0548619876592da6151c921321e002e9fb140c4cf38eb318dfd9877014815dfce779e0ed5794c947e78c44f493173a9882ae10c90bb015e857dc177382e544915def348b97446495815ad3efec1747f4d1729604c861e1e044b59492527b6f539309c95c6fc2cbb70ff7a89d73f3249f46002946b24b6661469987a7242d5f2b4b71e3eb06e9803f9ce06fd25ec812daa1a88296c46064db84ed885acb15473892e27b62df6b1029c0246df76e8a21062a24c5d3aedee207568631fe65d5394d68e04f82a7cf754822d6c939ec2b62d31b63ce332b12a9015d2375273f7ceafe87af39c64d6bbcf45455e789edcfd677edc9942c412d5a907597b87ab4a36b36fe34b204f9db437af1867cece1b7f0819133f45cdaa81b48f4a17d8d159b7a257c67b9a7b8002b9491a3f95dd38134e1be214102cba960d6b892941e6c34600f8bee2e54cc6e5da16265ef1864b845621278378c9da4aeb64922fd893a50e242df39c8cadedc33436b693dfd3c56fe92d0825bdcb3e5bd4af2590192d56437a11eec652b030b992cebf8fc1e45df715417b0f1cd6af8463ec8d613088b15be8fb19667c2eb9231bc66cfce9bdb8b66f08eac7932381ecf1a1632a89ba27d49b533a0253651f805f79af15e2e71c86d09d08a63272d52487b4b5176c703a34f42d6fb29ca0b9ac7760d164983ca4962e821f06f45eb65a220884ee2d57c1669199bd7dacd9f08d35be8dd5e6a5a3770394d131e504c9005c6b79e037e685cf052c16f25ca620e5b325eebf25c5a80c928a068d0fd37b38d3ecc756be80948f8c6422bc8af256eaa16f142dc4905ba5cd2c5801dc9f3d327406a91858b9dded54aba8400bde5cb4ab3d2db361f693d3aed66db86bc4991f5031cf2e9528e9a43e60cc17fa3617d2da4d7474da4ba100cba5f2fb570eb28e3e108f36c8f039a70df335c4c9911cf9dc7899cb5ff2fc31a8002579b2024cd727671fb5221074adf0a0a47f8e8f4f3d5cf11bec02c8ec71c8fb56ce6e771c8695c9112a8825bd0e3a87bb4657a10bd81d55bbb33c59f267df0fb5991fe3a60764c53957104a90181f5daad534ea10b8f7254f646415fad2c834e51ab799c811029d21acbc44f9384e9299c95c62fb1e8289d70d7ff99db300bb68f9250dd0b1fa865c41321c9357f40d7ea3f1e68e4a7e194b40f59a7efb0e68fe65809cc7fff2fbeb9bd80fc70f15b1777851795375e28d6d77e77338e60668eaed0eb55f1144f6550685bbae362b74520733ecc653686b71650bcd3b37c02175dc43b4cd243d6377b65b9e91a2f88987d8481df38da5656e81bd13748fc83477ad8ea4db085e6ea8715f0400215e9c9cb127a0c5800edefbff89e7805ddaf9c5614bcdea23ed8182351a580c6783b7c2a87f9e31af555558d30ee51cd24fb697d81d07256ec4abb7eb3beeb4db63f97531c7d806c2cdd0c22214c80100200a243df9b5d7025a5a4fd81e8ce9962603373980d71a278ab2b30494d8cac9d55639cc3c318783d237a0437eba2e92e06f6e0599deba4812ccebf57dd7b2c2da14137201a840b15303077898b6001095cbe6aa3e712afcbe80d1d2417c86cba3e6e25d7d1a79afe05c6ea55e6c423d121c5a47942f9a133633b57acb2ec741c1310262dbaf249a4030c230e5a05cc79ce2ddffce999f6f9452903c46b7445fce518a6377855068934e7ec63a9b01c83b7075828cea5987458b220a68f3d8aff7cc550876c0bf16b2de0c9027738cbebea610c098639fc57161f65d80bb58d80c75b219b6322d70bfe58b21c3488c29c5857a6169390101e75e7617dd371f5cdb8973283414b02e2aed86e4338975f1a0c589b3cc48f333f4754751a10bfeb2917cd2a5b19d5db0f19cdc3b2a51e70550919d906d470aa5d98eeadd9c70210ea196098de840e61e0d4b23fb3f0defd22084e9485c116137d6a2676c8d9388c9447be69d4406822c9adf2c8d163ab4d55d3db03ec07938fb39b769ed9ffc2042f97b167f5465e095999274e8975f85bc4e3fd4f44869f9a3b48b71b7ca649c6a309a485e9c9599916a7fee694b0ec6591045c9dbdccbfb32f501c6653973810731255e8338ebfb9d7d9b92a7c6172903244ad389f43d1328812443185d62aa4cdf338253756588dd28e81751fb115e5161944efa37aac0d2d52d67493437d8555e3d33090544425f6f90d0d51bde597df9783b9ac8fa95be0d25ec10cbb4e750ea6626d580b76ce0b576aa62aaae72816953245144e24cb3054a70eb21472437bce869ba9792b6cf50907925cc504b850816c8d065ee03b3efcf6d38c4400d10dc44c2e2fe3314bb92267b86f97629aecc7cb467745f2e0ddf4de4c166e1038a2b9609ec7047fc0b33dafae8a7ce8e01b26780af5e0fadf2618487f2bf492160d062b1d69c881a4da7bc030a6dcb743136164587cfc69258113b512fe6d2d96a40f3a347f6567bdb8e63a724d27bb193248b6cf2b2d3ff31d133155dd58e58ea3526acaf3819d75459445429b9ba29472fbd3351ed14d41c30b9245e083f712ca2ecf8c5808812542054f3a2e4360013c6d3bfbff35ecc88eb919a38c8f48e51494e81b15b8810489d1ab513835773a5f6fb27be38207cdd41abd42a1e02867ef71c6ddb8472520c98916b3334ae71e9bc3649d2f499939e2dc7a7575debad270f7b3efde5151d2da176b3a1c23a32aed566f88f2bf1670831da781c91f729bb2b9e226504d10f20a9bb890f124de7541bc82776347bedd5991db89658c9dc2f97bbf568f0442dbb3d8580c700af1c41e5baab0ee8fec0f1ef0e28909df695b9ac1cb3898d52f32c383ec9686a9aa736a7f03264c12e52b592f8514620f3beab0e3a0ac158926898c4451badbd5b4aa72a091af41831bd8bdfcbfb1f8d55255ae1771bcfe687a63f9c1e23706ccf9881726cc8d5917bbb0755e6b92d15663d31392456f8aaeffc49237d39614ff2f8b29b1dd776ee6fb1926ce03313752ea453d9794f9c24c1fda5c559fdcf3c7c54e7134516a58544442839ffda9f6b0c03cf27ef404e1736f8032efd9cc336b769a69f4a1507f77bd42a538d867f55a98a1d15fb3b784797d11c7edb3c22cb0379920e50f066485185146a1aa7aa563685a33c8482bf09ea4a3d66134384e7a44fe5465f8c5b57f3f81d8aabbd44070ebff886a79da942fcb953176a952207c7a56135608327e8bc60d27a1cff304a6e25d2cdb1dda2acbd39858f8de0f914aff471138fea69d00584ca1d4c38daf7dfbb1a0adbe0b77d337f6447e2d569ea01865b7026feeb9579dfb87bee4e09424539d97416b3be2b0c574a6bfc0b8ca9c7f961bda61708cbaa21cd7c39db0fefa8dd2dd947cc0f90c6c30ad7c00aecce9f75d3100cca3db0f8de2d5feab8060eaea8f6d40b0b972d9898657c2da1bfd56c20caa2e6ae33ade3bee395c93665b7c408b2f421fb708f08c3724509a10ad7c84f81183cba7498c37513c852065a25518270ae7c2b75d89b5d1da5d54ddb58c72041da865776589c8878040d6aa16f94cb5e60855c7271752199933e4d7f7f3abc945e7f37c89aa904ea2d9087271a3082d00057c688f9f7dc098e032b127e31c2409bf427121d9993d3a3482439c3f1de8b2d08f7daaefec0c24f9d1338891321a1d5b5e9c8b53e246e73707373607fba337824b08c3d89a618f74457b8a4e97ce1caa67a74ed7dc1e942bc432c7f6773089cc8676f9b3342e51398e6986a394f0737f43ce5414d52a2d6d2df9741f3f9574b2cdcb1c457377a4c835a25d5a72f1b639de09c12e89fee4b365ab726139e59eef9de5922a92de160ce2a8658af77a3d0cb97eadf409b2f52781d17387b1c29fa67d8de3596693b6cc52243d7793996b5c521b1ba1dc4961d8075b9e75c9748311ad56ead50a0b776a1d1a058d93a6ba8768c54ed46a074271abea2290a57d29099f77e606bc683c669b2522b93c39121f0be0fd97e0c462435ae824903d4ffc41eb430fd68d6fae6e7cc0bde12d624ebb9634fcea61c4b6d0ce21b46480ba849725e2cc56f913cd908937b3a05e1f094fc4c98499d5b2034f675a126c9bc4a92a74926322703517723b658db74d986978631387420fd60324b72dd77265459e217abb918c0b29a85ac3cca99c84f6a7d4a17722aa40fb2699a8c9d6b0f81a431165c0ca969320beb57c3037f1f755bff0602aa034476aa1a3bde192e35dd50eb9ddb28b0a34b72f05c64ebb6ae4f2c35c5a489d713c4c92524cb31f17f700da1c15c4e49538241c4bf404b2507263a2ee04d82526b333580ac078865618c2f8da4e61b5cb0b8e57dc825966b788b6f0e4b0d9042d57e8fd6cdc4d8a3ad04720d4c6696ab369cb11b7111074a6a45ae851c950ccd85e0da0750883ca0aa7137a9482cd5c4ef40b08aba8c625503dd6927803af8d5c95abecc602fadacbdd6e1475b85459025a7ea246009f3d2e809583fbaba67bfc6faa6999b5d7949b9ff068e8f61df3735e24cfe4683fcf099c82a0eccdf61f83d2e250bf81f9c4a54fbc88e2ed654fbd0bc06f7c0523186e7f14b4bab8b498a6a5375c82e84436bf228112467759ddd462a894201d449537e3d144428821c7502452145d0f4a5dfb0059b58117669e00f8e104c8049a1d9209ad3ab825d6f37e941ce781e77665ec46115330d3a702b7f4d9404ab335f38dc055cfb258ec65cf7e00b5d9adf5d1187a186d7e72a4327ab10eb54f8109b51dc44ba372ffe20b46fcdb932902bf863e1b277c95a8a425d6e3d567cd9f1e115db161aad369d191b646368ca495db56cadd56e031ffe9b649c4d21287fb35b416f4ef7d2056a5ec49c6ccb1fd3e353f7a7e8ce76f3ebb7cf95c0e08d66a73b8c20deebbff2de2f8653815059e162c945fc41119c6df9a5d18979072e9e735aa22b448fc4dac620f257f1f1fd6d6178fa433283f394d1be708dbcca987e865fb74479bf98559feabedba75cd4b5de4c6fa8d8202befe29bdd289dcace819a8d6d2e1b83e57084a00ef0c2f7aad81db4b15ac5cbea078e06d969f42c253b22f686d320601b36b73eb5a12a68d0e2c56195152cf0fad64d3f69a869d167c186960c61b4d74b7b700157eb743610202a011bc2eae57b947d487336b1917972db5100891be15717dddcae91a3bd0383615642a10aa3bf9452f9cad34ae131efdfc92ef81ce3b911af4070e32b23eeed57560945e25b44389c1694614d883d30da2dbe3c566dea0c00b93db070c83116a247e6fd578834ecc7a31fc6030b0be543b7cc23656891d766ce6e2c4845685e4c2018790d8cea4a2056469a41165207603461049c713dadfc91856a335566f6f7d019b74a084efa35d720a028a5a258b1cfe538d2e7ec0b51dad80b4ea8c3ee1ee5e168f7a9b1bcc57f71caf6bab7fd09a49ca2a51077765018712cdebd5ba97f8ee9aee544c791d39585df2b6c69a52b18e0d22970197cf3c342afcaaf", 0x1000}, {&(0x7f0000000280)="654711fc0de9c1e55111e5fcc0b65ac20322b6969568d903b431b40529b0f0d83a15629e4fef9188085cfb25a86836e29a3347fe05c84d5baef1abdea77c114df051cf7ff4cbe354d7eb81cf801cff88a8334dff198a43595186621a801968293d0e70b31fc8", 0x66}, {&(0x7f0000000300)="277a07eca122f7b822fc1805bed105e208832fce54699bb065a29169878f72ca6bbb4d70c41bb98d8f6671e09155a8e5f3b26561e9355a57db4ad313652864cc26464bc1bc0e3184f1f8a30afa2d29bb2aa1f181870422f7cb26496e54", 0x5d}], 0x7, 0x9) splice(r0, 0x0, r2, 0x0, 0x810005, 0x0) 08:41:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:38 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x10000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1e, 0x4) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x785) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x48000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000100)=""/247, &(0x7f0000000200)=0xf7) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x89a) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x1ff, 0x7ff}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x7fff, 0x20}, &(0x7f0000000300)=0xc) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001400)={0x7, 0x8da, &(0x7f0000000340)="3f0997674433adbbe2623beff198465edd849871f47046fe27e6cf8c40d46fbc13487b32eb2705a48eec2a3767eb120903ffccd63f48cb98d7e3d3b30de563b23dd75524dfb6800ff51017d31d3437d2b46f04c54c15f945ddd5bb9c168f3870a2715ab7561d8f3c3520d3ca4ef597bb2a066fd5907f20a4fb7d55c92a1854dcd1c477d0bc2393e5876c9992bca7f8", &(0x7f0000000400)="d9f5aabe73302ee3d4925b80569878f98f096f0e943f347bf10b71cf7e35a982252829010045f3d2b93d577efb5a67083aa348854cbe4ad62e3c4bd4413ebdd09333642895cca4ea5589d1fd3a9d0f4645142d81ad82eee239b265c8123afdbdd72f9f37933daeb0518d8732a6e61fc00137b70c013ac92508dcf8b31c798d5419b5857a0735618cac2290417c15e05cadcabad6ba39f15b25a88f593fe64e46ac4673f043da3da6c8f7ca1cc3774c67d1076f95a5a7282ee78be9152ce4c09311dd35ec92f9b7b903d946d1515f7809071f4ea648ca48b056f09ec83e4d5c40d041c2d2e4c730f297efd62bbe92d45b615dc36a9ff010a70094f7720b8b873e57278d05a35db4e4c96aed4305c0677b0563c95d4cf3b96dd2975d42a730175bccc5ae3f00cec05126c7d2d56da8257dd685c075a932e0352c0c660807f438eab69a87cf49f97932df3b0530e4d5f1cb0e6c4b741dec46799113384be7613a93686c69c0e9cb4afc5cdc46793f3d6a54717d3153348a5eb5a6df49d00149214d6860f3b2f109d82427531b049cb1ac07a3febb57727a7a2c529389607cb46c9f2b4c098e7bb56810f16684ab4e73942114fdfcf0868449de0f4e3cf83056b0d5f15668b4b64e3ecacca3f61fa56cee58fb5510e2a7755cf2a9f5718c302fe4107bfc8f94a56fb0173d97c40d845196d773bc69c77772b45a29fedbe834c291a032a0a58e0376d4e35a0e795b254862dc6236de0e14986dcbb7e79e2515b9306b405179c2a22ac8750ae92695b34aa2721223e23e7b36ef931b74bd6a9198ae95536604e119a5b036fe5624bbe4d8b9afba72be1ab5d06613c59ce2feb15967cbc1b92bbfa54bcf1a0cec938ee45f5aca9cd77bfdff1d473b07ceacc5afe8bf8f7c9a7f3298285d17f2fe5d452a69515bf1b0e640713bdf066073285d4259823f3a072750231765cfb52491c3fd8cfab2b459cdb7106998a2c3572f97e54c306c50b335902e35359a6c9781e3de5017b20da9626aee7f7446a7c457139833c1070d80d01718090108153936eea1108c92da36d24acd97cad5c0cdf004f4d398421de7acaca2b4197c51f31b9f5f802963a8a1364b362ba5bb6f4424a63fe5db73b998237107cc5271a5feb9f0858ec3378b8ef8c18deadb1f66a8b164e30f8b72b3d5f5c606ab288683f2a07cfd65f30ff316d1a4d12a4cb0caf5c92f466c1610d74878627869b4307db3dfe7bf18d46c2e8b1677b25fb9a2b2692f3bbefcbb278f4b167cccc06f6d03daa4196dd46695153c0f2964795d89235906653a625307f678802f3aea6ebe4266a30c33332590ac867c443d6a90f7e2ee6f7824381f631f1d19b7825a66f47e09d06ed44fa0a2e982066a1a8deadc7ab567832c009d8012015c5373c6a39b9ac3c8f3c4453a6406c8d843929235549b9e9ab3a20eafb8dee4c44dff35a7bc3c45783e7788f4ac4019d73331eb9328cb8eeb4bf610561bb91155ec9974f6715e6664c9122d3dd7c9ca7bcae663befb66168ae91f699e3f331a229d303d0218b62bb535b679e6fe2f1d9c6d39ba0552855fdad43e8e0625b098a4d41aa60ea7bf4450ee77a8487947b6568dfae5356c181bd8f5a0ef8414bea74eb8a27bd4c38bd8fee285606ece4a728992b2bb538be2c14535b21b6ab9fc1a1d29ce15b05be04814eb3df3120e7ab5933500a1fd335a256555659bffe649d74621900c859ce3767d53d87f02bc3a9a1b19d5c9966ec32bce805794df1d3c69b49f9278a4dddad8fa92ec7e5c8f30f841cd8f53cd040ec2210a4d4684756c2d19fb5af861eb782c62973f9dc06311ac9bd5b798d86a146bdd5d8ba8f5456076a906686686ffbf4c71ca9c0dc363c41c7b436c0ebb9e35b579fcfdd3354a5799e293d4e76bd3359d042cf9acfb79750665f034fb13c3e5a62faa084fbc03e6dcc93e2252365746a0ff3a5468f2afc6e7e4db00c0617eebe3eb90d4531c02116a275e594d57da6bd20b5d8364260fa3b668dba37d9a3b6b3c3de2f110d322a340398f3ddb42d77d823d429ba62b5dd0cdbeef541bc57b51a9785a575404ea56f2170b9eb5d17ae63a0c246e3a072d72604ff88049ae370612b13b4f93a792075116e8d944379a4867453c55bd29f45a4c921919ef02c836e13d34f53f865207b1287cb8fd110f6bb2cf543e73d731fce9725666eaef44d9e8a587cf5f00df812b641e301e8c5674e4d9b2ad2b4adec766e0c493534300b527cf9ecb3a8dd564206fee0910a95562fea93e4138383b1330dc7525093c0772cf50a73aa964da5d3a546426dcb84f095de5a733fdfbfd1dbe0ffa2ab67b02e632ecf54bab83abc01cd47e50f731bfe550adfdbe112ae5cd8c350dc11848bef1f5bb2bc722a35a2ac6549918a69650672172f45bd80f033f40ad724a432ec73658567cd1a2cbdcf675a2d99562c285bfa298ef03a0cd4ba0ad8012f1d422ea96bf30ad14f24ec6d5c018f174550d3a1005f4379cbe62f10491e3c9a32cd01a5b8e9df758bf77260e7876612ec94be2114acc7b28074d00079ae6291db5306c34d00735ef3d5a2108420a0262ec87d3ba563b7d07d21b3b7a9c4439e8c68c5082436531468c4987477c06723d38301ed8b0b9bc1c27c9becea6eeff42d614b8188309f784c6ada4692c2b376e86f5b434d5679044fb0d7687f9100bfdfe46ccbae6bb704f28425c73c7c47861b0b53b4e58fd88030e0e48c73b5f408c0b9667755e4daad1f35c827faf1f0af52deb7e5cf621b5d7c39b19608fb688942c697cf796cb7b4418dcf5df087ecfc5819b74673693abe4c35192c3da50a399f7e1ae68aa326c431fa2dfb6c80bd95f48af8dbca21cb3113b01f27d3e9bbb6f0e9178774ee7e64770e005313d2121a5e5044d9d98d0389d831c47f4cc68ca7cf4449d8c89a523cf2cf1a4f31ea585dfef3017a741f5766ff76bcc81583b8b4c11248ee56b928b11ae64238c90841d7e1f60d5b8c77fbaee6f81a4d3da961f623f0166ff16e5affba279d06ff722a6fd53e6806ae8d8476a5cf7aa8ddc8292215ecace9dd95d36ef44db8ea1eb17402a8954bbb19498699c99060ac2538c57cba4b16b621ef6c8c291e47269372a69503661f8651e9c8fe2092f6fb25c25451331355e4dad9d5c5f3c9df954b4f4dc654c7b73dadd3dfe784015fab4ee03a985418382a6532bde56686f12af9759a09acbb6c6ff16a8f07e6e05706cecd5cdf1a807a08377cde4d5b5952bb8d1d7b461065ff89ae94343be57732045dfb06b65d3ad3ba6f414a2db695f13bd96a5fe2d3f79043f2579a8c49d7892527331965901d9c7d6d7ee0968bebe408c9949b0e1594b3593daa22f4a73a068b4705a284a4e3abb6355bfd77a66968f1c493bc5e9ae2112b1cb910db649a3816b56203f5c2dc01b50721dc785c57d00ed98dfe57ea9318525d85764080b7f552be5250007b6dad7fe16c5def6e6204e87c9c5c990fbc2891b1cdb13ef8b50b31957366c4065ee7a7b6f16215590ae999cde9393cc09e66933b43de1576cb224f364c0f1daac193559964d8d26bb9c88c1786764593b7dd2dba3dc2fed65b0364e0ed8e5ac30322c254cc079e4daf0851f8cf6cbfadd266396a42da4a771cff6bb6e5a6ce0cb82578f6665875b9b4d5328c4af76ec01471471399ff9662dfc23ed0d393ff50eeee2ae7291bcc7667d2f5a5d4d90df088f9569f38b00446ab03b7f2855b9be72d2c2837ac1eaa02b79d1a5d592ff0e4e9cd754348e5c5a97ae8a5c8414b7b92d4bae9b56ef603aa8ee97a011dbff2e8d45685c46e88cbff092fe5829242bf6a23716f1b86469136c2e0ce6b003a31f688b929e7dd0b44e778af4281ee828089162c2a000cbd6b6695cc0aa3bfe33c027e5586253b6817d4d3b3c761f71b5f196d7834290eb2d2632fb54100aa5ea7b2f67cac9f2ffea262dc65edc4ed032090aa7dff0d26c9ec0d2d81a6e7878291b0e29984bc2dba383134aa3e145d10afd303b741133018ce1446b23abaf4abfb95b3e5d34cd65ddc7709501412c6d35b76f83ee689d18f661d53fabba47aed40aacd5edf857630f2acdd7e91b302b3e38e7a9120c36d760b6da96680c57dcb7c01e6a6dacc7bd7f42144bbeb15541f8d3bb8942cb69d669c6baaa6b20028342f733328bd314ffb3feb23b400ad1a7350107551b3f4b4f504a7d311e98a2d9058541d7cbf194e8afddb3d5e37c40d94df25a24efe75d554a1ae407a63e64e3d1d62aa3148d310d82205aebc716cb7b5a61814236ca7f1b3c46fa4d28d55504ef5f221cfd5c9af5f438a688273a350aaca1550665e08fd1f6d0477c4e28a118602ecb94c2fccce55c2a1185f171a5e5b88e0989a40761e3303431ade78175d89d13e4996f294e1558f994695e886ba1256bd29198f3825a8c9963f9567aa990c77134415e9244cc065c120c8dba932c5b043cd8fa39b9d047ea1b52f67512fb261c5f4a3fb73adb7ed285d051d767c3bc824375f9d3114f191a9067748360cb2df91ad0fb7c6b623c96c2dd98795a417850e516e1fd65d1c61a7be2959e5761873e919cbe0fca4c94bbfbb8b146ed5c977757045b46b27f88da56857bb90f40e79c8f31782376baafe2c86f642b531b9dff21d93e6b7d92482b0ef18bd8f1cba9e8a7e99f7cb30cdb2dd8f9a651f981fb9297390db6c104096167b26fd73dd82a142de8a5e3b1431f6d5a3ca56c10ca21f1918d34c2c8a29cc686d1302d70d9a6df7462ebf8bee2617e6f6e2306f22bca34eb68dc00147c3b8bf4e879692d561c54d39c5b8af36c81ba60c2d5a54adb99d218143230fee38dd8342c7a0632bc48692dd423bc145d535b34be333c471cf95658d35c73b8c7bdc33da97b0122277d18c1a0a9c639ef1789af91a9a0f095839d7d0938989462c412d66e98df272e4c2425d20f386075fb94f165fec6c9969a6ee7a4a9f5e62b036e5163c50823a51cb6e2c5b0230431c19c251536d0fa0713a326d1fce2fadf816a8c348f66ae9513d032acad536a3191fb664ffc5c8026ccb13dc329eacc0457585ff792482bfe063d6a622aa19e70e1bc364a2fb0b18bcb85391ccf0338fc5d0475017b094fe2a04c95a51b66d04ac3f6b14ee7fca8ca3b2722ab2d6b14fa295ccc9743780be28aed50e9c576f609b4e2131c23ae74daf8725b397dea5ce93dc936aeeb77bdab096566da11fe165b0d9e5e269e1feceb4b52f3d2dc84a0459185081b40a914e430ddefc7fdaa8811c0512d9c31e7a247934faa5a942b21c5887b82060b5231b807b8dfdc9c7d659abed61e64282b0c833389fc200cc809a75f16e6e8db10c1efb2fab9265be4d165fd883ea23b2dcbe0275f2bdb98c1721d4c51039998979c28002e73214e68443776434824adeaa827e5f8e613aa1224314c0cddfced53be07645e4efcd2f33760bf5211103e7fa4c2755e41c6a8dc20264a3742b1033ff099285ab6b14046bee8de2673d92cce24ece2c125d41099f91976d1e73c26d9c752b3e211c128e078ef27025672e93cfa067521265e9f867bff6a1c9582f461879fef265a001c2e2d7b579705db1afb41de9d9af39b9dd9a1b22194708f530ef993cbc0b4decb9a6701c300f32b2133d4df191b45cbc81226c49cb53aa7055f3ebe9c66ec06e48798a27fe93d58ac562dca8a1fcc120d9b61f273f303996a5be854ed615e20dc20265c0293d51a24222dba460ace159a14ab8e293b32baa35d5449f9e9ffd4a2d1b08aa6fce3ac3a892d20c57e38acb9e2ca09494cb2e104", 0x8f, 0x1000}) r4 = syz_open_dev$dmmidi(&(0x7f0000001440)='/dev/dmmidi#\x00', 0x7, 0x400100) fcntl$setpipe(r1, 0x407, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000001480)=0x1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001500)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'irlan0\x00', 0x0}) accept4$packet(r0, &(0x7f0000001580)={0x11, 0x0, 0x0}, &(0x7f00000015c0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001700)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001740)={0x0, @multicast2, @broadcast}, &(0x7f0000001780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000001a00)={&(0x7f00000017c0)={0x214, r5, 0x421, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x1f8, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7ff, 0xfffffffffffff801, 0x5f, 0x5}, {0x7, 0x55, 0x7, 0x3}, {0x7fff, 0x3, 0x101}, {0x2, 0x7, 0x6, 0x2}, {0x8001, 0x2, 0x6, 0x483}, {0x4, 0xffffffffffff8000, 0x100000000, 0x100}, {0x401, 0x3, 0x1f, 0x1000}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x2, 0x8, 0x400, 0x7fff}, {0x6, 0x5, 0x7, 0x1}, {0x9, 0x7, 0x4, 0x5}, {0x7, 0xfffffffffffffffd, 0x4, 0x2d}, {0x100000001, 0xc000000000000000, 0x4, 0xffffffffffffff80}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xdac}}, {0x8, 0x6, r9}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x800) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001ac0)='tls\x00', 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001b00)=0xcd99, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0xc0505350, &(0x7f0000001b40)={{0x546, 0xfffffffffffff801}, {0xffffffffffff8000, 0x1}, 0x7, 0x5, 0x8}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001bc0)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) ioctl$FICLONE(r0, 0x40049409, r10) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000001c00)=0x7) ioctl$RTC_PIE_ON(r2, 0x7005) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001c80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001c40)={0xffffffffffffffff}, 0xb8f643da51464b9e, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001cc0)={0x4, 0x8, 0xfa00, {r11}}, 0x10) 08:41:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 430.990086] binder: undelivered TRANSACTION_ERROR: 29201 [ 431.013101] QAT: Invalid ioctl [ 431.039526] binder: 17205:17207 ERROR: BC_REGISTER_LOOPER called without request [ 431.063032] QAT: Invalid ioctl [ 431.070717] QAT: Invalid ioctl [ 431.086261] binder: 17205:17213 got reply transaction with no transaction stack [ 431.094270] binder: 17205:17213 transaction failed 29201/-71, size 32-8 line 2741 [ 431.122608] QAT: Invalid ioctl 08:41:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xbca, 0x200000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x0, 0x7b21ef1e}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000003180)={&(0x7f00000019c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003000), 0x0, &(0x7f0000003080)=""/249, 0xf9}, 0x0) read(r0, &(0x7f0000000580)=""/155, 0x9b) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 08:41:38 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x800e]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:38 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x2, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_mempolicy(0x0, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x10000000000) 08:41:38 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe803]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:38 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x10002) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x7530}}, 0x0) 08:41:38 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0xfebf) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x3ff, 0x7, 0x20, &(0x7f0000ffb000/0x3000)=nil, 0x9}) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:38 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x0, 0x60000) sendto$inet6(r1, &(0x7f0000000200)="ae27301e29530c295fb69021fa9143b52f0eb59bfbf04e7314026f2d0afc2fc5723b80e9", 0x24, 0x40000, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @empty, 0x8}, 0x1c) read$eventfd(r0, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7da, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) chroot(&(0x7f0000000280)='./file0\x00') connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x1, 0x2, 0x2, 0x1f, 0x3, "7a419cb38ee166238f6af35b619a51544da9a5ad8d262c3b39451d2bbdeff44725a9cc7eef1cbe0972386599bb58e68368c1cf08648726fc2f044057561c04", 0x30}, 0x60) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 08:41:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:39 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xb, 0x40000) read(r0, &(0x7f0000000100)=""/158, 0x9e) write(r0, &(0x7f0000000740)="bf6e73c1ff20d543d199a028c2dc31b35c1365e52de8887b37d582fa7b8c73920aa3", 0x47) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)) syz_read_part_table(0xcedf, 0x8, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c88b65faa3c29585ba727c290c25e0170d845f9d94c02a2289857776d7237aed053098f4329d3059689df440c6df79b37999259dec9a5c0571afb07218921f3f8749da6ec222980f8aa335515d9780d459c7d655a41c7c57b91f6cbe0355235228a14d69e13069c83595dcd940f43b4029eda59735edbcc788f590915a2bd555aa482e", 0x83, 0x1}, {&(0x7f0000000280)="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", 0xdf, 0x4794}, {&(0x7f0000000680)="2ae91abaa995f2eab0f3506f53714d78e7e9e1285bec2bccb08445cdf04963825b000289a38c61913ebf668372a10eaeea6b7d8ff251334eb02427b9a69ddfbbc1de3e6927246df2c1889ba6e806304f1129efa583a2a0ba250894b878077aa95dc76abe2c796c2e19a9547e1c1a03011c95a71bca0b23e563ad7b11762ebb496362ebe134d3889553d5b948bcd8ec", 0xc9, 0x9}, {&(0x7f0000000040)="6ac052028c7ca7edbe55b6de43a878d2", 0x10, 0x76}, {&(0x7f0000000780)="c4b0a5cd08c7ee641b5ed86f7d3b230b5d81d108799b6c2593014b3914401111150cfe8e802cde26c2a815a0de520d0d2ddb0d4cfad36b4e404a367ce112a0605da52632f230605f0bcf8af78914e7abf42ac0b04c52d2b0e7394e0e75050f488dfeed0cb3ca3339273b0e8bd144ac39", 0x70, 0x4}, {&(0x7f00000004c0)="0c978bb4d9691f19ebb1ec3d306c52d9213e6a7e", 0x14, 0x2}, {&(0x7f0000000500)="205939577b47c4df0b50fc0e50e50eed460b417e0bf512ee33419ad0f281a8da2fb7400b2ea1ff50feadffecae4557f6103945853097db8d19a465b18e0248cccb0f23e5ce94", 0x122, 0xe7}, {&(0x7f0000000580)="14c09328ad7552fb5ae8", 0xa, 0xfe}]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) sync_file_range(0xffffffffffffffff, 0xba4d, 0x7fffffff, 0x0) 08:41:39 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(r2, r3, 0x1b, &(0x7f00000001c0)={0x18, 0x6, 0x9, 0x5}) 08:41:39 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='uid_map\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001ae, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) accept$packet(0xffffffffffffffff, 0x0, 0x0) 08:41:39 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x6488]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 431.849462] binder: undelivered TRANSACTION_ERROR: 29201 08:41:39 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffa888]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) io_setup(0x6, &(0x7f0000000000)=0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f00000022c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="14a4b193", 0x4}]) [ 431.918659] binder: 17260:17267 ERROR: BC_REGISTER_LOOPER called without request 08:41:39 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000001c0)=0x3ff, 0x4) 08:41:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b89c650e6518fc6ef4986a73952e4751256d5"], 0x13) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1000) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) mlockall(0x1) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) shutdown(r0, 0x0) [ 431.965062] binder: 17260:17272 got reply transaction with no transaction stack [ 431.994380] binder: 17260:17272 transaction failed 29201/-71, size 32-8 line 2741 08:41:39 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x21]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 432.074873] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 08:41:39 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) r1 = semget(0x3, 0x7, 0x200) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000080)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:39 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x33]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 432.157476] audit: type=1804 audit(1544085699.655:71): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir038011792/syzkaller.PSUQll/66/bus" dev="sda1" ino=17009 res=1 [ 432.647279] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 08:41:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:40 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x1) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x7) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) 08:41:40 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x40, 0x7}]}, 0xc, 0x2) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={r1, @broadcast, @multicast1}, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000003800)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f0000000540)=""/134, 0x86}, {&(0x7f00000004c0)=""/21, 0x15}], 0x3, &(0x7f0000000640), 0x0, 0x5}, 0x2}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000003980)=""/129, 0x81}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001a40)=""/56, 0x38, 0xffffffffffffffba}, 0x7}, {{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/1, 0x1}, {&(0x7f0000001b40)}], 0x2, &(0x7f0000001bc0)=""/181, 0xb5, 0x2}, 0xffffffff}, {{&(0x7f0000001c80)=@rc, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001d00)=""/140, 0x8c}, {&(0x7f0000001dc0)=""/51, 0x33}, {&(0x7f0000001e00)=""/223, 0xdf}, {&(0x7f0000001f00)=""/146, 0x92}, {&(0x7f0000002000)=""/217, 0xd9}, {&(0x7f0000002100)=""/73, 0x49}, {&(0x7f0000002180)=""/47, 0x2f}], 0x7, &(0x7f0000002240)=""/4, 0x4, 0x7d9}, 0x8}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002280)=""/128, 0x80}], 0x1, &(0x7f0000002340)=""/220, 0xdc, 0x730273e2}, 0xce7}, {{&(0x7f0000002440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/135, 0x87}, {&(0x7f0000002680)=""/70, 0x46}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x4, &(0x7f0000003740)=""/129, 0x81, 0x80000001}, 0x5}], 0x6, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(r2, &(0x7f0000000500)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:40 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:40 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x98f, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) fadvise64(r0, 0x0, 0x100000000, 0x5) fadvise64(r0, 0x2000007ffffe, 0x44, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x9, 0x40000000000000, 0x8}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000001c0)={0x1, 0x9}) sendfile(r0, r2, 0x0, 0x3f) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x3f, 0x101, 0x2, 0x0, 0x200, 0x80000, 0xa, 0x7fffffff, 0x100, 0x2, 0x600000, 0x2c, 0x8, 0x10000, 0x0, 0x3, 0xfffffffffffffc01, 0x7, 0x798fd5fc, 0x7, 0xffffffffffffff01, 0x8, 0x10000, 0x1000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0x20, 0x1, 0x8, 0x10001, 0x5072bffa, 0x40, 0x10d, 0x9, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2004, 0x5, 0xfffffffffffffffc, 0x8, 0x65ca, 0x401, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) [ 432.708817] binder: undelivered TRANSACTION_ERROR: 29201 08:41:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000014c0)='./file0/../file0\x00', &(0x7f0000001440)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) setpriority(0x2, r0, 0xffff) setrlimit(0xf, &(0x7f00000002c0)={0x0, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000013c0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000580, 0x20000828, 0x20000858], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x48, 0x0, &(0x7f0000000440)="f639a64a0f0fc76ed5f2946bb5b89defc8a0f965f154d64a0763dbbbced9873a96d954dd982d6db96ff55680987a3d9e107637af4a1e93ec0e8b0200004c0a6c62bedd89574c9e4e"}) [ 432.783108] audit: type=1800 audit(1544085700.285:72): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16945 res=0 08:41:40 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8906000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 432.883569] binder: 17317:17321 ERROR: BC_REGISTER_LOOPER called without request [ 432.914386] audit: type=1800 audit(1544085700.325:73): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16945 res=0 08:41:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x80000000, 0x0, 0x0, 0xeb3, 0x0, 0x7, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000000, 0x0, 0x600000, 0x0, 0x1, 0x1}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0xffffffffffffffc0}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0), 0x2) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x37) r2 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={"7465616d30000000000200000500", 0x79}) fstat(r3, &(0x7f0000000580)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) syslog(0x3, &(0x7f0000000140)=""/60, 0xe) [ 432.953709] binder: 17317:17324 got reply transaction with no transaction stack [ 433.044849] binder: 17317:17324 transaction failed 29201/-71, size 32-8 line 2741 [ 434.012181] audit: type=1804 audit(1544085701.515:74): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir038011792/syzkaller.PSUQll/66/bus" dev="sda1" ino=17009 res=1 [ 434.037357] audit: type=1804 audit(1544085701.535:75): pid=17341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir038011792/syzkaller.PSUQll/66/bus" dev="sda1" ino=17009 res=1 [ 434.062388] audit: type=1804 audit(1544085701.535:76): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir038011792/syzkaller.PSUQll/66/bus" dev="sda1" ino=17009 res=1 08:41:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b89c650e6518fc6ef4986a73952e4751256d5"], 0x13) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1000) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) mlockall(0x1) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) shutdown(r0, 0x0) 08:41:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2f1, 0x101000) write$P9_RREADDIR(r1, &(0x7f0000003280)={0x2a, 0x29, 0x1, {0x7, [{{0xb5, 0x4, 0x8}, 0x6, 0x3, 0x7, './file0'}]}}, 0x2a) recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/120, 0x78}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/216, 0xd8}, {&(0x7f0000000c40)=""/118, 0x76}, {&(0x7f0000000cc0)=""/65, 0x41}, {&(0x7f00000004c0)=""/49, 0x31}, {&(0x7f0000000d40)=""/1, 0x1}], 0x7, &(0x7f0000000e00)=""/171, 0xab, 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/78, 0x4e}, {&(0x7f0000001f40)=""/77, 0x4d}, {&(0x7f0000002000)=""/16, 0x10}], 0x4, &(0x7f0000002080)=""/51, 0x33, 0x6}, 0x20}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000020c0)=""/41, 0x29}, {&(0x7f0000002100)=""/113, 0x71}, {&(0x7f0000002180)=""/220, 0xdc}], 0x3, &(0x7f00000022c0)=""/230, 0xe6, 0xa082}, 0x8}, {{&(0x7f00000023c0)=@ipx, 0x80, &(0x7f0000002980)=[{&(0x7f0000002440)=""/227, 0xe3}, {&(0x7f0000002540)=""/227, 0xe3}, {&(0x7f0000002640)=""/133, 0x85}, {&(0x7f0000002700)=""/198, 0xc6}, {&(0x7f0000002800)=""/135, 0x87}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/104, 0x68}], 0x7, &(0x7f0000002a00)=""/60, 0x3c, 0x9}, 0xb6}, {{&(0x7f0000002a40)=@alg, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002ac0)=""/110, 0x6e}, {&(0x7f0000002b40)=""/24, 0x18}, {&(0x7f0000002b80)=""/108, 0x6c}, {&(0x7f0000002c00)=""/52, 0x34}, {&(0x7f0000002c40)=""/108, 0x6c}, {&(0x7f0000002cc0)=""/36, 0x24}], 0x6, &(0x7f0000002d80)=""/16, 0x10, 0x8000}, 0x80000000}, {{&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/246, 0xf6}], 0x1, &(0x7f0000002f80)=""/193, 0xc1, 0x7f}, 0x3}], 0x6, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r3}, 0x10) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nfs_export=on,xino=on,metacopy=on,index=off,nfs_export=off,uid<', @ANYRESDEC=r4, @ANYBLOB=',measure,dont_hash,euid>', @ANYRESDEC=r5, @ANYBLOB=',obj_type=,uid>', @ANYRESDEC=r6, @ANYBLOB="2c61707072616973652c00e27dde54c2b93a955227f6a76d102db6ec33deec1f73c69197806a50abcc4d8a022cf253c48bd789220896fe38bd5705185b9cc0cc5eda4084e3cd16794898e4b0e0e927b10d4ba94773fda5844861de10e4db"]) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x121000, 0x0) close(r0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000028c0)=0x28415605) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0x0, 0x110, 0x110, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, &(0x7f0000000380), {[{{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', 0x8001}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003200)='/dev/rtc0\x00', 0x402200, 0x0) sendmsg$can_raw(r8, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 08:41:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000003a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) getpeername(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000280)=0x80) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0xc2, 0x2000000000000281, 0x100000001}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x4, 0xcc4, 0x2, 0x7, 0x1ff, 0x7fffffff, 0x4, {0x0, @in={{0x2, 0x4e21, @local}}, 0x3, 0x4, 0x4, 0x6}}, &(0x7f0000000040)=0x64) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x1400000}, &(0x7f00000001c0)=0x8) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:41:41 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3c00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:41 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000d40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2000b, 0xffffffffffff0001) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xddb2, @remote, 0xff}], 0x1c) ioctl$sock_ifreq(r2, 0x8927, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x209ffd, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x14003d, 0x0) sendmsg$FOU_CMD_DEL(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x200) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100000c81, 0x0) syz_open_dev$midi(0x0, 0x0, 0x40100) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 08:41:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 434.217346] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.294164] binder: 17345:17350 ERROR: BC_REGISTER_LOOPER called without request 08:41:41 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xf3, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x70000002}) 08:41:41 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffff88]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 434.342580] binder: 17345:17357 got reply transaction with no transaction stack [ 434.379208] binder: 17345:17357 transaction failed 29201/-71, size 32-8 line 2741 08:41:41 executing program 5: munmap(&(0x7f0000364000/0x1000)=nil, 0x1000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x80000000, 0xffff, 0x1, 0x8, 0x80000000}, 0x14) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) r2 = accept4(r0, 0x0, &(0x7f00000000c0)=0xffffffffffffff52, 0x7ffd) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x10000) sendto$unix(r2, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) [ 434.441304] audit: type=1804 audit(1544085701.945:77): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir038011792/syzkaller.PSUQll/67/bus" dev="sda1" ino=17185 res=1 08:41:42 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x11]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:42 executing program 0: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet6(0xa, 0x80003, 0x2c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x2}}, 0x7fffffff, 0x0, 0x100000000000000, 0x0, 0x4}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r0}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x644000) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000002c0)={0x1, 0x2a1, {0x280000000, 0x6, 0x303f, 0x7, 0x1, 0x6, 0x1}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$EXT4_IOC_RESIZE_FS(r3, 0x40086610, &(0x7f0000000140)=0xffffffffffff1737) 08:41:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffab4fafb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1, &(0x7f0000001580)=""/199, 0xc7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000004c0)={r0}) clone(0x28000600, &(0x7f0000000580)="95249825fe53292c2be944e70722a5ac02f136ba39ae3d7c4509f5c78c9cb262ad3f6322aae528cb74dc4c4961cc07d5a957347be5b2a4f6f0788bd1d6605b165c08aa03fc0cd2ea81e0dc66698c1f97c68202c6456d340a5194a69d543fdf9dcc8c1bad2606d5d32fddd800c2225c0295611e98325da853703a547b131bb5ea136fe73fe3901813c9673c7b65c6e82712ba9c18c2a2cf4db691244f8a1c7875f0dd41a614dbb77a2cf2ce0f57168ce95787613b1617959bec0837b072cf2820739dc1d11582485974784a2feaf132fc95ba", &(0x7f0000000240), &(0x7f0000000680), &(0x7f00000006c0)="189486070b1e93030dc96ead81ef8f97dcff7fb0336f2cfd17964d298cb3dc1687830ff3c048c9522a9c29cfef599ee30fcbc8d9b2edac33d5f1a4c958") get_thread_area(&(0x7f0000000540)={0x5dc3, 0x0, 0x3000, 0x6, 0x29b, 0x2, 0xd, 0x1, 0x100, 0x48be}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="df00"]) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, &(0x7f0000000440)=""/127, 0x7f, 0x8001}, 0x0) [ 435.135943] binder: undelivered TRANSACTION_ERROR: 29201 08:41:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x28001) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x75b6ac62, 0x80880) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000280)={0x4}) listen(r1, 0x401000) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0xf}, 0x67, r5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000001}, [@map={0x18, 0x1}, @generic={0x0, 0x8, 0x6}, @generic={0x8000, 0x3, 0x1}, @jmp={0x5, 0x4, 0x6, 0x8, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff4}]}, &(0x7f0000000140)='GPL\x00', 0x8000, 0x50, &(0x7f0000000300)=""/80, 0x41100, 0x1, [], r5, 0xf}, 0x48) r6 = semget(0x1, 0x7, 0x400) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f0000000580)=""/94) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x18000000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000800)=0x3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}, 0x0, 0x4}], 0x18) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x12, "bca90a0d6146cdb99d38d2a9e4590e6fea16"}, &(0x7f0000000500)=0x1a) connect$llc(r4, &(0x7f0000000600)={0x1a, 0x33f, 0x4800000000000000, 0x7ff, 0x7f, 0x53}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000540)={r7, 0x200}, 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYBLOB="910000000000ba9910e5c81a2f81a743920ef00c16f7b02febd2cb03852670baff03e6b9391ec2e809f52989a18a32ac7a000000000000000000964f798694404719"]) 08:41:42 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x28]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffab4fafb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1, &(0x7f0000001580)=""/199, 0xc7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000004c0)={r0}) clone(0x28000600, &(0x7f0000000580)="95249825fe53292c2be944e70722a5ac02f136ba39ae3d7c4509f5c78c9cb262ad3f6322aae528cb74dc4c4961cc07d5a957347be5b2a4f6f0788bd1d6605b165c08aa03fc0cd2ea81e0dc66698c1f97c68202c6456d340a5194a69d543fdf9dcc8c1bad2606d5d32fddd800c2225c0295611e98325da853703a547b131bb5ea136fe73fe3901813c9673c7b65c6e82712ba9c18c2a2cf4db691244f8a1c7875f0dd41a614dbb77a2cf2ce0f57168ce95787613b1617959bec0837b072cf2820739dc1d11582485974784a2feaf132fc95ba", &(0x7f0000000240), &(0x7f0000000680), &(0x7f00000006c0)="189486070b1e93030dc96ead81ef8f97dcff7fb0336f2cfd17964d298cb3dc1687830ff3c048c9522a9c29cfef599ee30fcbc8d9b2edac33d5f1a4c958") get_thread_area(&(0x7f0000000540)={0x5dc3, 0x0, 0x3000, 0x6, 0x29b, 0x2, 0xd, 0x1, 0x100, 0x48be}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="df00"]) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, &(0x7f0000000440)=""/127, 0x7f, 0x8001}, 0x0) 08:41:42 executing program 0: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet6(0xa, 0x80003, 0x2c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x2}}, 0x7fffffff, 0x0, 0x100000000000000, 0x0, 0x4}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r0}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x644000) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000002c0)={0x1, 0x2a1, {0x280000000, 0x6, 0x303f, 0x7, 0x1, 0x6, 0x1}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$EXT4_IOC_RESIZE_FS(r3, 0x40086610, &(0x7f0000000140)=0xffffffffffff1737) 08:41:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 435.285469] binder: 17397:17398 ERROR: BC_REGISTER_LOOPER called without request 08:41:42 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/223, 0xdf}], 0x3, &(0x7f0000000540)=""/10, 0xa, 0x3}, 0x10000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 435.331931] binder: 17397:17408 got reply transaction with no transaction stack [ 435.363500] binder: 17397:17408 transaction failed 29201/-71, size 32-8 line 2741 08:41:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8906]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8035000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="22cb", 0x2, 0x44080, &(0x7f0000000040)={0xa, 0x4e24, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24040000, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) read(r0, &(0x7f0000000180)=""/169, 0xa9) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x100000001, &(0x7f0000000100)=0x4) 08:41:43 executing program 0: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet6(0xa, 0x80003, 0x2c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x2}}, 0x7fffffff, 0x0, 0x100000000000000, 0x0, 0x4}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r0}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x644000) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000002c0)={0x1, 0x2a1, {0x280000000, 0x6, 0x303f, 0x7, 0x1, 0x6, 0x1}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$EXT4_IOC_RESIZE_FS(r3, 0x40086610, &(0x7f0000000140)=0xffffffffffff1737) [ 436.150629] binder: undelivered TRANSACTION_ERROR: 29201 08:41:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x28001) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x75b6ac62, 0x80880) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000280)={0x4}) listen(r1, 0x401000) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0xf}, 0x67, r5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000001}, [@map={0x18, 0x1}, @generic={0x0, 0x8, 0x6}, @generic={0x8000, 0x3, 0x1}, @jmp={0x5, 0x4, 0x6, 0x8, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff4}]}, &(0x7f0000000140)='GPL\x00', 0x8000, 0x50, &(0x7f0000000300)=""/80, 0x41100, 0x1, [], r5, 0xf}, 0x48) r6 = semget(0x1, 0x7, 0x400) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f0000000580)=""/94) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x18000000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000800)=0x3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}, 0x0, 0x4}], 0x18) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x12, "bca90a0d6146cdb99d38d2a9e4590e6fea16"}, &(0x7f0000000500)=0x1a) connect$llc(r4, &(0x7f0000000600)={0x1a, 0x33f, 0x4800000000000000, 0x7ff, 0x7f, 0x53}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000540)={r7, 0x200}, 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYBLOB="910000000000ba9910e5c81a2f81a743920ef00c16f7b02febd2cb03852670baff03e6b9391ec2e809f52989a18a32ac7a000000000000000000964f798694404719"]) 08:41:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4010000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:43 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/54, 0x36}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000600)=""/200, 0xc8}], 0x7, &(0x7f0000000700)=""/121, 0x79, 0x1}, 0x20}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/212, 0xd4}], 0x1, 0x0, 0x0, 0x1f}, 0x2}, {{&(0x7f0000000900)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/31, 0x1f}, {&(0x7f00000019c0)=""/166, 0xa6}], 0x3, &(0x7f0000001ac0)=""/104, 0x68, 0x3}, 0x80000001}], 0x3, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001c80)=0x1) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) [ 436.310395] binder: 17438:17439 got reply transaction with no transaction stack [ 436.366878] binder: 17438:17439 transaction failed 29201/-71, size 32-8 line 2741 08:41:43 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 436.512666] binder: release 17438:17439 transaction 131 out, still active [ 436.519625] binder: undelivered TRANSACTION_COMPLETE [ 436.525146] binder: undelivered TRANSACTION_ERROR: 29201 [ 436.532152] binder: send failed reply for transaction 131, target dead [ 436.571395] Unknown ioctl -2147199744 [ 436.590961] binder: 17452:17453 got reply transaction with no transaction stack 08:41:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x543]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:44 executing program 0: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet6(0xa, 0x80003, 0x2c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x2}}, 0x7fffffff, 0x0, 0x100000000000000, 0x0, 0x4}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r0}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x644000) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000002c0)={0x1, 0x2a1, {0x280000000, 0x6, 0x303f, 0x7, 0x1, 0x6, 0x1}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$EXT4_IOC_RESIZE_FS(r3, 0x40086610, &(0x7f0000000140)=0xffffffffffff1737) [ 436.621953] Unknown ioctl 1074025694 [ 436.627333] Unknown ioctl -2147199744 [ 436.639501] Unknown ioctl 1074025694 [ 436.654843] binder: 17452:17453 transaction failed 29201/-71, size 32-8 line 2741 08:41:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="0dbd9ba2f1417ada2d540ec406cf5df6199a618a3f85e47491be0163186b99a3734ce4ced8cb16cd34749add6cd76c4320415520468624fcdde8cd55eba22dcee87b5b37abdcbdfaeb59cec4a849b9106d35b8a8a6a38e85960d7d24b5131f3dbea64fa8", 0x64}], 0x1) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 436.772232] binder: release 17452:17453 transaction 134 out, still active [ 436.784543] binder: undelivered TRANSACTION_COMPLETE [ 436.813770] binder: undelivered TRANSACTION_ERROR: 29201 [ 436.843992] binder: send failed reply for transaction 134, target dead [ 436.927566] binder: 17465:17469 got reply transaction with no transaction stack [ 436.993756] binder: 17465:17469 transaction failed 29201/-71, size 32-8 line 2741 08:41:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1f4]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:44 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f00000002c0)='net/protocols\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x400) r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000340)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) flistxattr(r1, &(0x7f0000000180)=""/232, 0xe8) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0xdbf7) [ 437.186763] binder: release 17465:17469 transaction 137 out, still active [ 437.199533] binder: undelivered TRANSACTION_COMPLETE [ 437.231181] binder: undelivered TRANSACTION_ERROR: 29201 [ 437.267312] binder: send failed reply for transaction 137, target dead 08:41:44 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000200)=""/4096, 0xffffffffffffffec, 0x20400001, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) 08:41:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0xfffffffffffffffd, 0x0) recvmmsg(r0, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) sendmsg$can_raw(r4, &(0x7f0000001fc8)={0x0, 0xa1, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) getdents(r1, &(0x7f00000001c0)=""/25, 0x19) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:44 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x6) r2 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x7, 0x100000001, 0xf0, &(0x7f0000000300)="ae40f2d2a830646c3063b02f079e5aefaf05ce6ddfebace0a712819f0e7f26a6f2cbcd290c558f3492478834d1e29d04db6374b290c0e6710dfaade7dd38a4e00dd54121017166ec3b8ecd1e8b707cf7adc949fbc24070e82559a4fb7af11c6790fb1c5952f025a5ffa0051e483a3485c2df2b4004cfdb8e57967acf006bd774bd4f0e380c3bc81264a19ce1c9b594d95171cb9a889e8d8aeef0c92d104852e3a2cc60f7dedf31ec79040cd4545b413d90330eedd7600e3b90f8c7983d591f3067f49d95c02c0d3632ccb92ab663be144fa5642b0d83ac99d7bfdf72db4a94105d5af9a08d60dfe0c086d96f388a8d44"}) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x75ae7d310ed3e445}) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f00000000c0)=""/116, &(0x7f0000000140)=0xffffffffffffff04) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 08:41:44 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in=@multicast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@loopback, @in6=@local}}}, &(0x7f0000001040)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000001080)={@dev, @dev}, &(0x7f00000010c0)=0xc) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f00000004c0)={0x0, {0x77359400}, 0x7, 0x13}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001100)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001380)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000500)={0x84, @rand_addr, 0x88, 0x0, "6d68000000000000008f000000000020", 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="00022abd7000fbdbdf250c0000006c000200080006000100000008000b000a00000008000700260a000014000100ff01000000000000000000000000000108000b000200000014000100000000030000000000000000000000000800040009000000080008000400000008000b000a00000008000b000a00000060000200080007000700000008000b000a000000080009000000000008000b000a000000080007000300000008000b000000000008000b000a0000000800090000010000080006000000010014000100e0000001000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) setsockopt$inet_dccp_int(r2, 0x21, 0x11, &(0x7f00000003c0)=0x1, 0x4) poll(&(0x7f0000000440)=[{r5}, {r6, 0x4208}, {0xffffffffffffffff, 0x401}, {r2, 0x2}, {0xffffffffffffffff, 0x109}], 0x5, 0x3ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c630000b93a598ca4fd51003290fdee48cfca6d66bb4348d6a60cdc8251913301000000b8c677a6333e054f20ffe96dfb59355c09fd"], 0x1, 0x0, &(0x7f0000000140)="14"}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x7}, 0x8) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000) 08:41:45 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa0010000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 437.478238] binder: 17485:17489 ioctl c0306201 0 returned -14 [ 437.513761] binder: 17485:17489 got reply transaction with no transaction stack 08:41:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x31, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00006a772000f50018000900000034110000000000001d010000000000000000"], 0x1c}}, 0x0) [ 437.530535] binder: 17485:17489 transaction failed 29201/-71, size 32-8 line 2741 08:41:45 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x7000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x7, &(0x7f0000000440)=[{&(0x7f0000000080)="54ba8a96881f868f4eac9d6d32d4faa43601bf9a14d8767bce7f7f1a06cb2b52767f4fb0603568d19d84c4c6ba8b13dfef13556c5cac9e63b92027f6b8d4850626dc5da6dd84b224fd77712a21d769b08df73f1a761646dcf638d8364efaf359bc5a8fea374d64a4d6a611b57105643b", 0x70, 0xfffffffffffffc01}, {&(0x7f0000000640)="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", 0x1000, 0x10001}, {&(0x7f0000000100)="d1c0be48e9d78164289e39134933b77c156d4baaa68924a19ea1cb5ff222deffcaaa20fd9111cf1df432bb1f178c54d8744587c55c50f1e6021d1e916eab87fd978976f4765ed4e732deeb5e071fe04a0a69e1bf7a35b090596e9adde3d60f5793c7e2c1ed765dc367e7e402630ea92d7054a3b8f3f13700be94f0f5cecc23a1b7592b157d9c4f6a2419bb98347244faf451d590dd5c6e79a9be898d878fbbbe92cb22cc605186b1e997caed63bc43a867d1f9ed039ade6308", 0xb9, 0x3}, {&(0x7f00000001c0)="963316bf522a9367f9ab2675b9a97a373495995ec6c037b3528df0df947e940a719edf5f630bb30a7ef617ceb5c6444deb7e0a08c5492f6ba5bef0966950ebe6b00253c1b4a8ff61aaaeeb224e634fedd23cb2cb601215d905d1d1491777852a74fa6cd4f5903512e955d50dd997d6e1e1c3f2904c91578baa01e50aa3a107ed5c81985c8179af99aeaa46257f4745", 0x8f, 0x80}, {&(0x7f0000000280)="5cea9b3f5ee76b7c375183f3e641f4873630daf051820186431fef6923938652f06dcc14056d218be1318b0f7d1db056ba3990f585962b5207114788a24712062015ad63666f8fff87f3278138ea47f00aa9048650d2d8acba9e3e160afbe7052ab4da8ade66ac798799a447ad291f4d1a822b47dccd35feba2733c82877e68595f10f1660ecc0c879ea4e0f00b97ccf61859a587d18e1235a7a71fcd90c19c8b791c65c4a6f8773489f005d6c8d0a8cd36f002a0e1b", 0xb6, 0x17}, {&(0x7f0000000340)="c1e302cf4a9f5e96271ecaca82b19bd03c1bc3bc6950545fb8da02323a2a474057227bbde789729abb8ce66ef26e36dcf500b8cac6145b3ca797eb365bd3197c75ba616e", 0x44, 0xffff}, {&(0x7f00000003c0)="759c682e5596fde472156381e982fc297c0be292280190cd133082cb31641c817af3b07b85ac8ce3a0594695d168f6e85f6f04b373d9cbffa10d94c2dc7e05bde7772f45e50c73b58347b99a6869b3a2b6e97aa15fa587e75c60296b739d5f2b8d67be4fed0eb73d9987941dcd2b", 0x6e, 0x2}], 0x10041, &(0x7f0000000500)={[{@balloc_noborder='block-allocator=noborder'}, {@barrier_flush='barrier=flush'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) [ 437.628507] binder: release 17485:17489 transaction 140 out, still active [ 437.642665] binder: undelivered TRANSACTION_COMPLETE [ 437.664565] binder: undelivered TRANSACTION_ERROR: 29201 [ 437.690678] binder: send failed reply for transaction 140, target dead 08:41:45 executing program 5: memfd_create(&(0x7f0000000380)='/dev/dsp\x00', 0x3) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2, @multicast1, 0x4e21, 0x2, 'fo\x00', 0x0, 0x1, 0x53}, 0x2c) mmap$xdp(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x0, 0x10, r1, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 437.731162] binder: 17506:17512 ioctl c0306201 0 returned -14 [ 437.737644] binder: 17506:17512 got reply transaction with no transaction stack [ 437.745678] binder: 17506:17512 transaction failed 29201/-71, size 32-8 line 2741 08:41:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 437.794891] binder: release 17506:17512 transaction 143 out, still active [ 437.806899] binder: undelivered TRANSACTION_COMPLETE [ 437.820767] binder: undelivered TRANSACTION_ERROR: 29201 [ 437.870452] binder: send failed reply for transaction 143, target dead [ 437.898260] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20001 [ 437.906756] binder: 17524:17526 ioctl c0306201 0 returned -14 [ 437.942139] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "mask=^MAY_APPEND" [ 437.958066] binder: 17524:17531 got reply transaction with no transaction stack [ 437.973044] binder: 17524:17531 transaction failed 29201/-71, size 32-8 line 2741 [ 437.980861] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20001 [ 438.068034] binder: release 17524:17526 transaction 146 out, still active [ 438.077749] binder: undelivered TRANSACTION_COMPLETE [ 438.090035] binder: undelivered TRANSACTION_ERROR: 29201 [ 438.103891] binder: send failed reply for transaction 146, target dead 08:41:45 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe8030000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:45 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000004b00)=""/45, 0x2d}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000080)=""/11, &(0x7f00000001c0)=0xb) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000003500), 0x4000000000002c2, 0x40002002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 08:41:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:45 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, r1, 0x0) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x3, &(0x7f0000000280)=""/136, &(0x7f0000000480)=[{0xff, 0xa3, 0x7, &(0x7f0000000340)=""/163}, {0x1ff, 0x39, 0xffffffff, &(0x7f0000000400)=""/57}, {0x7, 0x3c, 0x3, &(0x7f0000000440)=""/60}]}) r2 = add_key(&(0x7f0000000580)='id_legacy\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="7f5b7d6bb62f85a747a31669c578610f09b25db9fe4a46e7a1c533601c20c1ec2d8b2f804bd19cefc3f0ecec5c99e3aa70b1d13996d86a5de76d8a630783bf14baafbcb922bdaabb13754e593acfb5ea3ae5187201fd913e5176fd9f6edff8787e02204cb4efb418a36ea941cfb415b35f3dd0927163f3c0e592122c9351cc3565e9b73a0d5e90c4079f88e989392d17980a952003a23e5eaf65e184d541eaf248822e7d1fd875b4e20fb50ac8294abfb8b0a863642169c907b94cc7b53ca25fa60a51139694e3354008253af55bc1462b76", 0xd2, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000700)=""/57, 0x39) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000540)={0x5e, @local, 0x4e23, 0x2, 'lc\x00', 0x1, 0x7, 0xd}, 0x2c) 08:41:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a007fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000100001000204080000010000000000ff", 0x58}], 0x1) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x4, 0x0, 0x6}, 0x8}}, 0x18) 08:41:45 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x40000008ec0, 0x0) socket(0xa, 0xa, 0x3f) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) close(r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:41:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) 08:41:45 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 438.331991] binder: 17541:17555 got reply transaction with no transaction stack [ 438.341428] binder: 17541:17555 transaction failed 29201/-71, size 32-8 line 2741 08:41:45 executing program 4: r0 = socket$inet(0x2b, 0x80805, 0x0) shutdown(r0, 0xffffffffffffffff) 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2b00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:46 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x0, 0x6}, 'port1\x00', 0x8, 0x20, 0x5, 0xffffffff00000000, 0x7, 0x8000, 0xfffffffffffffffc, 0x0, 0x3}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000600)={0x7, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x88) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000840)=0xffffffffffffff7e, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x40, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x35, 0x2}, 0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x69a, 0xffffffffffffff81, 0x7, 0x1, 0x6003, 0x7f1, 0x9, 0x9}, &(0x7f0000000380)={0xffffffffffff7fff, 0x9, 0x100, 0xc51, 0xffffffffffff8001, 0x1, 0x1, 0xffffffff}, &(0x7f0000000700)={0x5, 0xe5, 0x1c000, 0xd5, 0x8, 0x0, 0x6, 0x201e}, &(0x7f0000000780)={r4, r5+30000000}, &(0x7f0000000800)={&(0x7f00000007c0)={0x7}, 0x8}) fcntl$setstatus(r3, 0x4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r6, &(0x7f0000000040)=0x7d000000, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x100020000, {0x0, 0x2}}) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) write$P9_RWSTAT(r2, &(0x7f0000000900)={0x7, 0x7f, 0x1}, 0x7) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000240)) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) time(&(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000008c0)={r7, 0x2}, 0x8) 08:41:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x141000) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0xce29f39}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000001c0)={r2}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0xfff, 0xffe2, 0x5, 0x8, 0x7}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x10001, 0x8, 0x3f93, 0x6, 0x905, 0x8447}) 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2800000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 438.751577] input: syz1 as /devices/virtual/input/input10 08:41:46 executing program 0: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x4, 0x6, 0xa0c2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000140)={r3, 0xc}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x7, 0x448, 0x4, 0x1f00000000000, 0x1, 0x9, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x4, @remote, 0x1e3e600000}}, 0x1000, 0x100000001, 0x400, 0xbb, 0x81}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e20, 0xffff, @mcast2, 0xffff}}}, &(0x7f0000000380)=0x84) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000003c0)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r7) ppoll(&(0x7f0000000540)=[{r2, 0x264}, {r2, 0x8158}], 0x2, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0)={0x3}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000600)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r8}) r9 = dup2(r2, r2) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000680)={0x3, r2}) ioctl$FICLONE(r0, 0x40049409, r1) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) dup3(r1, r0, 0x0) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/mixer\x00', 0x200000, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000740)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$DRM_IOCTL_UNLOCK(r11, 0x4008642b, &(0x7f0000000780)={r3, 0x3d}) lsetxattr$security_capability(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.capability\x00', &(0x7f0000000840)=@v1={0x1000000, [{0x7, 0x8}]}, 0xc, 0x1) syz_open_dev$mice(&(0x7f0000000880)='/dev/input/mice\x00', 0x0, 0x0) fallocate(r11, 0x3c, 0x7, 0x3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000008c0)={r5, 0xffff, 0x27, 0x5, 0x1, 0x5}, &(0x7f0000000900)=0x14) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000940)={0x7fff, 0xd7a, 0xfa, 0x6, 0x0, 0x3}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r6, 0xfffffffffffeffff}, &(0x7f00000009c0)=0x8) timer_create(0x4, &(0x7f0000000b40)={0x0, 0x31, 0x2, @thr={&(0x7f0000000a00)="60538472e3067ba7b82aac71ffc75a3792500e8591c3464a94e4909bedd05942b65a62c948efb35cfe05e22f8224c1aa815fbbbd9da0263615091c950dbb35e628b4967f39870f48a539bd7eedeb5e26b82cbf2e76067037e57a38fb4dc1f753166ab4f3888c2a0a6f5da92d51e78a63446d7742f19060ccc00860147ff8779fe2a6428da55e8a17283e0fd14f81629a96fec3cab203eaefd5167e85d93c16a76cca48f7e761c14e68a0431012b58ef4a4841c236883131efa7299f8963927b4d0db08b122053d1e632781b3afb3455fb8ec5a7501624be94260b9a4fe5c798d8e2a7fc609e5", &(0x7f0000000b00)="73b6938aa785cd6f802d4e297c17e285a681cf536d8632f366ee6620f258bb71c8302733944de12bd915c18125713af95fd153f2af98f9"}}, &(0x7f0000000b80)) fstatfs(r10, &(0x7f0000000bc0)=""/240) [ 438.803378] input: syz1 as /devices/virtual/input/input11 08:41:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 439.090886] binder: release 17541:17543 transaction 149 out, still active [ 439.097855] binder: undelivered TRANSACTION_COMPLETE [ 439.103489] binder: undelivered TRANSACTION_ERROR: 29201 [ 439.125823] binder: send failed reply for transaction 149, target dead 08:41:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0', "eec77f144831cb8bc14ede8e4dc49891dd85c314cb548ef946fef6b5edcf92bd291b83222d65bee70071ad73e816d9a5c63d99b26107a908ec2918d1a7e482776f8f405b499dc317f050e4de45419a3eb99dadbee371a20b25012df4035c555627bd630f940238366db30cd85ce3869e9054bee25779cec41c2b592f715820b88b8553f76f77a7e625e1d5cbda81c31e58f679160d1b16a1ac4b084a1e353bb9ccfee7d2b8c1a87d5d69fb5e313634987ce6469bbb854c5a403cf5369299029c6061068cd03dae23fb24854ab13eeea6b2582031b625450efbf46f475e3ed79f5c860167a27ce43eb15fc373c6afcc550475909dd50c7813c88d07d23d44d65f8cb9567a901a94659c84df363931520142707b70637c48cbceadf8c83b38c96c0c04a9699888526e951951fd7007501d33981aaa0142c2b727d7ed03c9dacf8bc3922597c2cb6b921a4fb93cc510f654f6cb0dab1279226b5e93674da3bda2a9486cfa67bd2db789adeb358e11231e4184b3ede45b669e27fa5e9ff934f5c7310e4126f87930e32bab8ab6bd37f51734733a410d1a2c2262f99b302e05aa36ad593d0eeb170bac55f32248a7b8fe2db338cf1e3486a876c121cc123c2de54ce8f7bab6d80d1f780c40d24e22cae36638024a19409a2fce732b9bad6fd4eb6c053ebdee41345963a4be61d5f41da029cae7deb57e877bf29920c115ce3bf0f98b0db51df401f676411b81d9cf8879e63505960a6a1025fdcaa5a5a91a2b95f3992cb9612f8cc1cc81ea08f3c39417a812006a2e9d5abca4e77550b76f87ddbca2e4c5cad63a31ac7e6840b29b944a13c99503d9cc7d5aa86a37b899b75328afe51c76df56dddd04e4b93d22b5123c4f802f0b80c6bb4c26fe87a3a1235ea4e0475d07d61b491a4d9e99a7d1870f0e9b8e6ea7f488ff2239cf55c35b5da2b96d87c4b4958baadd4313b3de797570a0e8f04b07fcf15db916d25721174b040d5455719bdeb236bedfe3752da46e20b483dd3cb69d0e52dbe395379a02c07aeb9cf1bd554188b74115f455006687f1970ac4fcb8d3fc5d4bfa0fefc7acf429585af5c8cfb06e4030f850021b1f46046f8976725350d8794e51b77e10b86c698b1547970c23daa7be48f8ef2bef5b591a3ca5f24dea1854d1cfc8765a4f52016cb7049802d1d11a3ffa554739c37d1e5333c11774639fe3b345750c7013efdf6aa9a082eb7d69e612bf44ef17eed3e9a62af25597e742d225a9d392b2065deddca95b85d875194e0dbabb18d9a1122aaec114e078b1d75e0cd1747686ab9b61de995e20943eb6546bb5531f0eff216d990d6452d260a804cd49a2a71b2c1d33134a305c456fb91e1543c4bd8db0286f224fd9095f7f3918d5e6da421427d964e8e5921e63af163e35078e1fed5739b69220102cff625cb5daa30f8f852f6c32274464020aa4ea0709a1ee32386e65f2570c92c4e7043716b6f2191c15584d2c51578130282c5ef8f15a918acd328250cfc31892b04cbd0a763274949d9bc347c51f7b63e08f1f71b7758e294b4e6cf22a369ee34e81594c0dd81a175d07fe6e18df40763569649659f560f6e63f9b69c69faf368c558e8fe3dd65ea99311a68dc3f57abb6c773039fa793dc86759b7495eea9c5b476cfd6f3f5300bcf4828efe751a5daaa4eec090a8b3ab529213fe675a82e62f960bc10fcd6ed0cb9c5524a1c7e2ada31283d8509b202e0c9d03f5a8293793cdd0b2a054513cb675fb10ecd506aade1df7ac95366737f81149c36e70076533a13ebaf3877055d527b4bfaf22319e5c4c18a0d3af8ed56ed09fb9f0c1a188f6bfefc01a41edcf90f4984737347ad7e2da2993af6f69a6747c0847901b02e9437cd367e3adb87922b8c8dad6dedc0816dd43904fe1f6b8774fa258c5b518a1c3336dcec6b6cc76555d64077c54d20ff6e93bcc28a445ddb3636a30b6ef78e5194c70ee2b2e7107371af53a9267f0e36bb5a67fd4cd8dbcc91daf48b34a48231a595ce1b44d3681dee2bd877072b9a87ac9785910ed0493c69cf4d667b22a8681a3d49319f4f7f98aac91801a990162b1ae06346ced041c504fb8caef8740fd4c1c174fb632fdd44b5e626be1b03dd1952b2f65a38c0002ca40971dbbd8e644a2593b7d8d524dbea052daffe15805e97e779c9401aedca256c529cb89300876bb7246a8fdb839a94711a272eb2564b74d5dab81b16e7e29a87bf72f396c321b7ddaddcb20fddd0dd7c6e99e962e7434df7e6e474b4416aa78083c6443f8dfeec80cf30efdea12efb0da36757b4a0b58c26d820e4f60d5afa9dc43b32cfd2dfe5e672cbd3787c5e79f08f83d05dc679bf7ac02506d40d789a41a331a478ea97a0e7071771747f4c706a2d9e3b51541fe51234b53fd3ba6292693c98cba23eca7dd52df0d29ee7eb609970cebc7f5b631e9d83a1df8b94b0767eea6582c8493f4cb8706ef229ab352b5f3616f58b38cbba8a8934779b0ac3b9ca2b829b5409ada3cec881cd4d2df00cfbed3161c20e343ef4747fc1e3615f9113276c9674beafc1904835da3cf1dad6de32a5e6d5122a619de062ef998d867b5e425982b146d08852e105bd602ab24af938cd3f430070029658772f19835c52f119a480e9d93a7d60e3961cecb99fbc22cb7db9675873c3ae0bdd6be7ccf81c0409437472cc30218b23dac402d2066a432238ae7a7c500d8880adc2ca13e4a53a750984818b5ab08db03f5fe15b9fa427ce509f92386b0574210c1591df07c06b8fbaf98ddb71531bee2121ab9b1fb868a9b45e18c33d391192ef7a16fcc222963d7c3cb40dacf8e5ab6654c69c082125d2938c01d77ffba6206ebbcb0578c70553c14b9a0d69705059a5794b0328b1e5a3a28ac7ee905a3a535a909d976a5adc4954ad846b764f7c3ea51e1063f9095a2c2916268ae9caa2f48e04ab7eb7dfd26be19d5be4e6ec2311dbc51e76d23c62840074868e60223a483c3e7d615756536a148acea84b95954e314c54f46e627fa117ba01487022f62a24b00ab6df0b0fbf8311b9efc32ae8189ab8ee82616a362c38f6cbbe4105fc433ef0ace46d8e29b616ce719b332eba6433bd9f9af16113d45e6c6bc4d852977125f3a14c031f27ed138f2d9025ecd5a510eab7bfda1564d2e66e994368972b3cd2182e0695bd7da3dc8430f8a824acdd6568f77476b3b2190ed9022dcd26b90bb23a623f3749c557770c7698776703be91e23a1775e2f4a38f129fbaf27ba505997833ad9591ed7e6f45c8926c66872b26f97789f704cbaa05d308e78a14d31e1e31b3c0da78f4bfaef15f66d7a13a10e7b7afe0a91615e8606cd5269e7175588977d0e12f9d67e420557e34312eebbc15896c6e6e524385cbd69903e74009140f15aeb386828aec388b78b109016a2c0560a2e48dbd3db4a65923e450610a4a08334675fdbfad8faee93c9b4693e702009e1b5e2f66c7f7f65acfe19dca8631934c41fcede27ab8544745a64139362d8d11ad400925eba5a77ae8a054d4f7b210f7b7b0dbdf1ea847583bca64f3bb0601d4eb3570d9dfb5515600810531a4599f2f7cdb1ab128bb9e8f655ddd5ad7f86b939601e35e1816f60945e29eec880fd423c242d8e072ae9d1cee110d0e6ac62745145265fe3ba2dc880806cb7df877a63cf539ab8d4247e6b9e0b5df6fc03972e5cdbbe1004a884bb0c8df627ec1a9ccb2bd28a8af6ad733fa7a3f97eeca1bd1d47af99315410a6ee7430f8e6c82454cb321d6c94a9c97334f421052637eaf332078a7bde0afb3025e15617babf5f930b0df59c460281e52013d09d17472e61027aa18b15f44ae0435789dbd81dc23407eff72b582d0db82c5021a773319b77ee741af5f6c849173568fb5c938635ade98c88c4c18e56eb66069acca3ced926aff7a181b110c569e12167dcf6136f9f6adb958c49a8ff584c3f234afbf95d7173eca6d3d2e8587280a543eb075cbfdeb0de099210b4c2ba6239a6ace739298fa8ce29d573cb3581d375f56a8394b3ddf554ba910e2a117260d80b12a785a5de09db16ced5ea75021e9e6addb987b7274d4250404a657c294c2494046653c538b07c9320b9c53f9ead3b46cbb3cf464940481108b8193b04f3779b0751697a83ec43d18db94f4a16b3b37cc2425819de0e7e0521fb2a05ea562c5ed03b6bcdcb0e091896fda48898b2827dc7b47ccfb5de109dab5194464038269aacba83ef2adaced6ec5f8089bb21bc8e95a804828cd2c9bc832e959bc1deb0799b7346469bb817d564a89cc8bc7d945ba0dd586f5c6b07578d7c8a1bb40dbae5d10b7633797120be8be8b91864f53a490fe36f12924583bb750b7e7d9cf6db09577e6a3590f984ee9bf0cb0f3a68ec3ee3fc525a290b23cbe7c75e5fab15901c449633f4c11ca8bbc83ef98f36e278f86e2ced1fa8d5c79cc1d151a45e08647c408b391e6060ad608631dbd4dcbd9a4e72dce7510774e49a1137d4bf016d8e4c27b25031ba9a857e70ec6237039583d452e6d8d3ee534fee9a61ddbdb5a4bf0173ce55ef482aea2c2536a3aec0e6e41276bc560888e6d083939d9b17c830567bfca46629dcfd8da9ceff623b24c4792f8164dee8ba5ce83b6b861903bebf42b1a4dd9307c4945d358a8e19d5c1b334d8345ac2d95199bda41b673a81e8c05e3162f80bc971c70c927d71b76a6f0b8786bdfecdaa4b59785c16b8e66134b526e1bc318ee6f1166089a24d5495a305e237acedb4181f1d7259a02a47b66540f3a8e2a2c5890a20aca57d089cc830dc8d6d125805d36facb224f5613e51cb6615b3f4578a6e93958cab6faa29c424f34c4f739d3b07cf3e6a3f813b04863716644735abf66709c59eba0dec6d66927752f8dfbc662e271f55267cab0de4a7eba0a67bd89cb6edb97a0eb474d6dfcc541f9ccb0b758d3c9a8b2a769aa2ccfae58ae878da719ec8f57a014d58cd39b4f387222fcbfaaf6a251e9651d82a773e9c5f7070eaef62c4fe3e65e4aad03fc7722c0503fce7610632998f30b483f42bee120513a0188de75aa244a1bfffc3346b4e15e5efb7b1a78254a7e401b807929596244141ddf8750a3064ab9742a182f133bc89c0c41bb9cad2e3a837e92664537f8daae3344fd036e2e6f24ce30433f9aca4863b1211e411783a22072440d5fbb26e78889b7f54806b4e1dae79935705bf15a7537a2cb4174101a6ee17c6baf00ca3cdddc2dbf1541d06304c3a3eef1345483397f62f722d9186816c3c187c3283a78f13b1374adfcb1d55762a44d710d40ed368f8359ca5563be0061924d830c05027f419e5edd9fb016c426f7f8a8533fdc5603b8903ad8f8b391217de97434faed47ffda549ef938f82c40f3e1cc260b25759cecdb604dcc8c7b25885e47683afd359ec2f9bf06eceb5d45354eb000098b169a8a174b7ee35d24cc7b8038ae73aca5c0994bf252c13a7564ceccc1bb52799202a88556d459beac4aaf160d5a2e89a1cc888a016f06d71b21daad9a92bb3d87dcc85e98ddb0e5e2ccedbc4823b0f9c820483e8f0a3f5abd961834c5d82705d4622d6d8dcdc7206f40fbe587de77b57263a6b432490f35f0b73baccad37a98171f5e1f973bdcd2087f2af8fe2cc27faf91100502ec31e9f1e247ce5099f95ff84e710d3fd04b07e83c7f5baecd4d8666dd78bcb1950c5e609da3e28148033fd62fbe92458197c4c60d89695eedc69a9bbd7355ea2678d77a678aa55fa3c1f6b4aae24b49f16102a90a8b719bd68ec9ae410ac773013813d9e9224e9f4134eab48d"}, 0x1004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x10000000077, 0x0, [0x487, 0x7]}) 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2c00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="23767d2aa1c76e6574316e6f646576656d3100", 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x297) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x30, r1, 0x2) r3 = memfd_create(&(0x7f0000000180)='%\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x81, 0x9, 0x1, 0x140000000000, 0x1}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x400, 0xd, 0x8000, 0x66d0, r4}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)) 08:41:46 executing program 0: recvfrom$inet(0xffffffffffffffff, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhci\x00', 0x200, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000600)={0x1, 0x1, @start={0x2, 0x1}}) r1 = socket$inet6(0xa, 0x3, 0x5) accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)={&(0x7f0000000880)='./file0\x00', r1}, 0x10) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4c4, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000004c0)=""/239) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000007c0)=0x8000000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x25) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r3, r2, 0x7, 0x2}, 0x10) exit(0x0) 08:41:46 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in6=@local}}, {{@in=@dev}, 0x0, @in=@local}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000b00)={0x20000000001, 0xfffffffffffffffa}, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000240)=ANY=[]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @mss, @mss], 0x4) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404005, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8cffffff00000000}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[]], 0x1) open$dir(&(0x7f0000000280)='./control/file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000600)=0x5, 0x9d8a3759aaf2aa72) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) r2 = userfaultfd(0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0), 0x4) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000680)) getsockname(r1, &(0x7f0000000340)=@l2, &(0x7f0000000480)=0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xd3}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000500)) getrandom(&(0x7f0000000a80)=""/86, 0xffffffffffffff62, 0x3) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) [ 439.176836] binder: 17606:17611 got reply transaction with no transaction stack [ 439.190509] binder: 17606:17611 transaction failed 29201/-71, size 32-8 line 2741 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r2, 0xfffffffffffffffe, 0xce, "82f737aa8a235bc11bd75cd62ec4c40de8408bbf4d91fb1e39558f1f08af6bca92813c633af71bb05b4c42af1d79e9ba8621f5da19433ae28f6418635c67eb8db07f23330c40764c78a7c3349e9dd6cd38b9dcf9b3e52631348cd89e411d724a84553866d0cab05e158f499ef713a9a41f04b2d0b36a8baffaaa435610ba2f6e2cf1394d83edc719557ab8cb21176f47de43c63b2bd4f609b7cca821a5140bb5be7175761321b4281e2820d5c902d055028ee18fa0f4b43b901436082762f753dd5ff80bf294f80dd1a9eb4494d0"}, 0xd6) recvfrom$llc(r1, &(0x7f0000000140)=""/198, 0xc6, 0x100, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r0, r3) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000000c0)) [ 439.356291] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 08:41:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x500000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 439.486253] Unknown ioctl 44802 08:41:47 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x6000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x101) getpeername$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='.%\x00', 0x3, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000340)={0x20003}) 08:41:47 executing program 0: membarrier(0x134, 0x0) [ 439.889138] Unknown ioctl 44802 [ 439.898288] overlayfs: filesystem on './file0' not supported as upperdir 08:41:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:47 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup3(r0, r0, 0x80000) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0xffffffffffffffff, 0x2, {0x2}}, 0x18) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2000000000000000840000000200000000000000", @ANYRES32=0x0], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000000100)}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8) 08:41:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) dup3(r0, r2, 0x0) 08:41:47 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in6=@local}}, {{@in=@dev}, 0x0, @in=@local}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000b00)={0x20000000001, 0xfffffffffffffffa}, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000240)=ANY=[]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @mss, @mss], 0x4) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404005, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8cffffff00000000}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[]], 0x1) open$dir(&(0x7f0000000280)='./control/file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000600)=0x5, 0x9d8a3759aaf2aa72) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) r2 = userfaultfd(0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0), 0x4) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000680)) getsockname(r1, &(0x7f0000000340)=@l2, &(0x7f0000000480)=0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xd3}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000500)) getrandom(&(0x7f0000000a80)=""/86, 0xffffffffffffff62, 0x3) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 08:41:47 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x6, 0x5, 0x9}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)) fcntl$setlease(r0, 0x400, 0x2) socket$alg(0x26, 0x5, 0x0) [ 439.971368] binder: release 17606:17608 transaction 152 out, still active [ 439.978362] binder: undelivered TRANSACTION_COMPLETE [ 439.990862] binder: undelivered TRANSACTION_ERROR: 29201 [ 440.026172] binder: send failed reply for transaction 152, target dead 08:41:47 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:47 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x100, 0x100, 0x8df, [], &(0x7f0000000040)=0x9}) [ 440.140483] binder: 17680:17686 got reply transaction with no transaction stack [ 440.148000] binder: 17680:17686 transaction failed 29201/-71, size 32-8 line 2741 [ 440.171965] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 08:41:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x200) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=@dstopts={0x1, 0x2, [], [@hao={0xc9, 0x10}, @ra={0x5, 0x2, 0x6}]}, 0x20) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r0) 08:41:47 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2b]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="7f02e767b1d8281172179b2cfb37825ebb572424b67ebb62da7fe647010e7120a50614949e1f7ee9ff1e416c34749c04ce27906bc734779115b67d5720e2251d024fb88ce17d48d1a05bcc89f738ccbff7a21f5824181693668f99f5c8b041a7d592c59c91879435090c5152ecbbeeaf4324e275b2271c9ca79090ddc0fbdc6ad0954118f6d02957d354ffbc87dd13e73e6b78d6d0a988d7c97ec507588e0bbc0e617b301a149781fbf0a6e9e2cd8c36d1bc9fd95049bb670fa0c0a244680dec3f32c3be552d38e847972899ea7b86630038cc66f568b7e2cd9c0ccdc3f15701a3f6d33874a0d005fd73262b4251fdd3811cc88fe0092bf53789c8649429e5f9fb53dd873df8198145b354e785e5d08745c083a052812c5e4b5710f8a6d1e05bc3d75b80325ec420dbaa7ab331cc990b1c06fadc2fe4c16184926281945e867b387f959fd52b92c06aa5c79abc6ef0f479d9ca0aafe007a2665482f6bf5a222f874b69fe3a33ddec3e1c9b2e938c73944cf7a35ee6bcfdfaf751c9916dac179805458f8827018198ae441894b51274381054d8be78168364e1552fb7d3bb7ea2643fc8421519cac574a6bc6450dc56818cc5b6e48222ba26ed90ee4088baa2368f41dfcb700e07829bb7e1c3380e888bebca959d8d575f4f3de84a6da26bfea2e35a37c9aee896af09fc1b5c93bf45a1943fe7042b1c49de77b0b304735501f80923769066759d104e8beb68b105dd1ea207d69b623875616d5c8143bee5f909d44bccdf547e834bbccd410e7aec988eea5daa8dc6cd129c70f66c7fc0e49351cc2a184754b5ec7938b3de537f985294ba08898ff711cf57823d3a669deb0e70f760407ce3d8f27ab902817d2e41b9dd87ab701f7df695b76c24639d3d04ad199b618c417d65a6fd1938bdfe060ab0e6bf96b056bc9e93964e2c9c3877da307688c9e1b93cc0e823bfaede27ef9f7a75458498ed5b2cac31540e9b841592832c145262486c1658c4323fe3dbfb766ae65b71b692f38caaae132b94a2be147958202de38b6eb6af33a33da4d24bb5533c0d5b31087236bf5f2dcf0473eb9f7b53030f700118c39d45ce1d9a96d1ff8cd2b4a8fdc7da21dcacb10e2e30d0bef21d5165c62cc99a21bdf995f66bbe4548fa42a1b1c2480c6051e7c99b04ffd2ee3c85be951e2e97d3100f9621afd0beb8156e95baf95180ab23020117737d65914ee7988fc6871092150bd625bf4c6e7254317a0193fe0f373dd1cafa274f0e9d7cb5e22ca27e42177161e7d79469d60fca1f963ebc253fc62a8f7bba525c8c85e965553586824f5ffe3c15c758a768cfa94f52d4919a44634e7842a59e8112cf01c1ae83d3203819ea4df03c2f118827d024b7b0490569114f15fcd15087130f6f2ceaf9de94742459f32bc049b4334d89adf9ec5ba2f11a9188d3f5778dc958b77cd59e46213dfb3406ea33555042210819baf4f224d3e98bd6bd5e235074361b1494746dd5e1a4786393d2663f584adee8e603538429ea5ea5430398d7bde72b557a6a5faadebb6a4d03262ec34574827c6cc2c13a78764ac1c29a9405d1b6c139e526206eee91faafee69c8795b833456be33f1fefd7200728d1ae3a44577469ffe5a5611815bf40a12d97514e89d88d9606ff37090de8767ce669879fd28dcf437dd927112b8ffdd6ecf39eaae2040f2eee42d9851a7e13b777c6444b5d8c60a90cfb7698cbe1d50f9c0d3e03af056ad31ce00c9b6f0860fb08d7a33bea1c231b0f92eaeab662a88d3fad75a37facf06dc41b67d280b72858f633724e4a9d6528eb3281c8a15da3f67fbe417083f9e3c15c3f973ce6e5042a26e49e7d36e355a7c0260097c971ccab9985a9aba5a918dca2667fa8090b7a3f835917bb8b16b0bcb72710a335c8e9c4a154f4e2af9f4878682dd96693ee93a527711ce3f997792ec6eda84d8bd45685c586c9491a46b6a36ad00424b9a4208de1f3a876b78d5991cebfd8c20ba6b9568f8d928ed40bae850c0a26372d343bda617d948032422466f7e9e8a43a1ee1d897e375631129672af312e131d36bb00f5e24c9e7cfd08d881b56c3d2a67b3b76036c8d3b6090a400c23cdc7a1c98fe74b210fe27eb7a638d9d44c43e028526ee745f7504388c1586f6c1f6d74d5f6a642255764df2160243c63c306dc2647884ce80b9ff38ef92926204d6c80d98d1ce4057cf7e60a004dbfe8e3328db9bb417fd17fd10ea392ed0ac508c91bccac189c091f6ea92a867c87a9bbdb1ed983e26442e9c4c9415f64f727146325c4e4", 0x658}], 0x1, &(0x7f0000000280)}], 0x1, 0x48055) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="626d8a02651c194b0c4af799c2b480bfaddc501e08b3e313dfa0793e529f144cda55df4f675ff401bad35b633028e747515f8cf03c37fb1f4b0dcc1423a7cd637cb6abe9d4b667315a54ccaa1d742eec337268c078b0af77", 0x58}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="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", 0x1000}, {&(0x7f0000004d80)="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", 0x1000}, {&(0x7f0000000240)="5d916b0967dbd24b3c74025db179681157b13c58fa777e70750dbcea8fb305022202a59648af9c33c2ec637df6b7664e1ba6207080849d7465a23ea0f2e1e1804bb5920584bd6881040ddfac5080d20387ff084dc76371bd728d832df7570929cbfe600b101b6652da5f8d7383ebd0b93249121be604c821a261258f9f05e81476dc3383b0c16c6f7338e6e634bc36ae74", 0x91}, {&(0x7f00000060c0)="97efe196f5a4256ad02f020d73aea8842d17ac949b573d4fb6f9ffc9fbe0fcdb5ece00392e6c83dc48dfd089b32812fb0110857c627d9490b43a7b701cd32d16bc018c17b616ba5e9a88767133101afe15b55179d9497f862fd3613565b9981d8d1f7be7351c1ac636825eaa366e042458a2fc7a6ce68aa6deb9ebdac3fccb308cbaf89954f4c0412e89282aea379b296cab64467cf7abfc79ab6ef105677ee928c8ea0b97761da2816a162ca22e1cf66f43936e20d5d183e58685d614182f667fec8e05aec0560c7cd5cbe808bf46df4d806392803ed014720770bedf3069a0e12fb8df732d8cef6c33f2142e1154e15e0ead51cd7934903819aaedb172a665aad5f17304918600bfc13071a00d9dd354c01b21731dbe437e510069f54524972338727fb2bfa13b30393b59b75c4accd9e1d6bec54924235fabce6bd876ea49bcc63e929255ff447fde01c772319f031dc69d38686ad2a3059b114a2e046ed3b9efce90e35c54c32179dc3ffbb73c575237e45635f01fcdf59fa3b6d01aa4e7089a1d0b0854560dfed9e67e548132e46c19bdf0ee76be2ddf8c64d873bc725055dfa2132f5da6bf60bfb270e593727f6b47ae025971f353259b7c4a4862dc625e00442f09efbf5b8dac17e267802196415138cb79b01d0885e5e6239a45174157ccf1d9a03d2860c8780a93c185c6b14f7e627acbd6aa82a7d2810ebb4f81d566fb8212f40c192772199af5a343782a221256f580e43dd68191c5b871a95a6437c67d8daef64bb59a877acb68565035b28a8b4cde4033242600f26ea2ca7831d1a1037820ebd8c42848c044470bfa9a0b2836b1ca783c3300b68c76afaf1937f3fe5d93dd8ed5a3d308a985f9d7899cea658369e820ac0bbd2143d720f8929a25537012c3b9cc67acc62856dfe316a5f78d1780889ce50b487a4903528197efe6f9317406a8d459b656fd98e98eba8805a7587c5daee3d693c2f418297eb0009ee62fe31e733729d58345b3b94c8734045b7bb01593969d157987dadf32b0ae5139ea8dc03af14c91ae10d15b356e84edbc126ed14c39a20c36690ffa3f6eee7a3a89faf1e9792cecbdff233dd745f118f96aa3e7c68fffadf7f0ae0dd2a9f717b11704b5d7f0baac4d7acd77b888a8e59a58fecc7f0bbebc0a465afbd1f732646b69ff796a309f5719142180f6abd73f7ff3d1f1557b11ddd33571b7ed71a46ffc9b3a425179fbf431282d844c836df70e20d1b09bd153f4d3729fca1e6eadd45de536298a5cdc44f87afb346bc46c7cfb11365ce8dc2c137b3100cdca2cd26c3520a9d587e164e94a41bc34f285b5b5833199ded94cdaf4c7a02c9c58627377d4373cd8b17104506f02f0d065d60238833d64d43e412dc9783a16ce5d348fcf216784056ca19477fbf8db5c11161dc80e2ad9047e68d0d8f686838dce86c46390cf42cb780b9a62bfa64fa26dbfda35283ce36be53c9ec7690847861939a4f25c297393a7211dabc5da572f2f68eb494f7c91b5d3df759f937015128ffadf75d673f83bf4dfd336c79d08dfc28347b0c7e635d524ecd772d927d07002cb12d3c292e8de0b7ced2b77c8d8b52f1793b6c6f11c1e8028fa8db9e999d6dfb1ba33759ccfc7fb506bdb6f9fdaf51b53213760a9c3765cae82dc36671cc5ad9c960d7f73322235ac0574d3c0790cc76538faa2e7eb2211bbe11a76c0f06c4e2978b413160f28b37d1fe39d4c9a0326f44dd9fa3d205d85bc2e26934722e86200fc55a995001da0a5eef4f1cf1af9e4032c1de7a1ef20ea78ea0ec1ff4a5df400fd16f9823081d9d71e27d58e701248568b6bbc0c2cf1af4e9e5d57d7d0ce536d5ec0650c5b56a30f11220d1dc1940d4d3eff6d0d3f0729453697339fb989dfddb92433dc3ccca61f7024af64cc4a8113e89b884445447597ec09a0d698484eb0fd813ac1d71e4f50d99572fc64a7b5f3e40c3d657aae6d0b2ae41b26d6aa5f262e45cecba7f30f3ad447078760525e8796548c74684ed2b90d7622c99baced4db78ca15f232ea6fc069cf158e8137184db15015165879d468ad8a94477667d6cd53496dc293c9b0daf1242a3443defbb2187d5e4c7aaf90771f3563c17b872d3c9aabe3067aab9610127a08f7c8dadcf7cf767dff2e8facdb86926f29ce526b66f613e907777024f6234507e343de2a9b6804893610acdb3cce6c7012bc874bccd5fa3f8e5de62b49e0e5f47a835a556a5e1fdc9e09998d1d88a5d23eb1fc89d1d6067f113aba9bebd328f0ffccaa0fda6c84e0de1bb3477f867aa33f29ad14577786bca10bd5010f9abb0f079060728e626be1d2dbd5aed18439eba837de15ae64136b1f921d08ab6efbf725505134a707ec160807bd384da67b81c99f04d3efc6dc884b05d2ea6f0d4132aa95d2f34fe7f73d635471b7e6fdfc3c1c8eade84589da7e92f71048b7202a182f9a67e11239c26b2fba965969a69fbdc7924efaaef9723a4acc3fb64e3e1933032320b930b295382a7c3583b3e388fbd542a2a44dcfb6b99022795ff418c2a9fff644a5eb1114829b38932e36ad8f541ea82675b5ec99758bb1487ed976a32620451bdc195c89dc3556a9b91da325682300b36a1ab4e77fde7813f86c6ca59781ccf22f4bb04025712fe2394cd7e32da6cf0cb9d149f4b7f8eba92539ecdf51b453bf15db0338498bbbf0bef6d508380bfcc7366e84b321974d1cc6b102561604e91cb1f59534f75b923660721ea8f78fc35e3cd6ea35bfe2c279b44a88acc84671b0335da84b10dc926f41aaf90abac72f70e2db639404af48498f514e1dc28697edec290950321979c7c2e708e28772d58cdad56f268cea60ae439dda1f15c2fd8ab86ff7b0b8cf27e7d09da05ab2edd2080c320ac8977b14ec05fd82f9077d0c5ae0659dd4dd120a06e1fd8ebd0a1067dd0209347ee72664f96e2f6ad7b3a7fda3e88e233ae5f03b41cf9e1eda7491a7725866b54f9046d0fcc9cb97ac1d210dddab298132e69e6e14ef8f0ecbcf65d42869156f9957ace144d85c81dfc66174e9a821e5d32ac8a5c6d5f3966cf21e3baf7bebd542c6a761e73aafecd982bb664221947e61513b20da3a4f66d484c80172fe980c145622063e12339b1f98c439d338a96bdb03cb9619e93ab53bdbf1e38607aad464fc2ca1936eec65f8124b27a20f55374576e074f72b039b39b60a64ad8c404c747fd436727331e2f017e7d41a23d2b1852e849798fbea195be8a4c7c17a8f3c700bcea21256ddeee30548c0c547e429382bebecccc303f9bf15862ae4a07a301c77c42252be122796eca48848ef4bcbafaea1bcbe5314cf289f55e6e842e2006d85a22fe19ffda741eda7b260a30b0bfd7a0c8c64a0ad4483816fc3a21b6ae04ad31907be190841a8bbc5aa8a137a39f23480301f7b85ebd5fe7e97ea9f84cb6b5edc1114a05c96cc8d473a17c8c875a1782d512b04edc544fc836ec05ce68bfe4fc94f193696e50e5651ca20ceaed8218576144f7aea26c8b657c0e3b4729e23c3ff64cb53d60a16f03fa109611ae32de0a81d609a43f49df40f126e00941868dcc3fd4bb83d59a13eaf1726a3218533c0020aa6e491daea7feb4610f11e187167f10e4bd38486e1a26a650b1f22da5d5cae2df3cd4fe8a9ba34c9b3a0ab883de774256c2e1111cc45ad64071da9ca7235f19bf539c6f4af09b231632e5e62488a0f40005c3d33d4fb9ce09f483aa2c92cad99f08f40586a3fbfafcea2bdc393688ee8925233a64c008dbab407b94fbd5cdd1ff9bb97b54bb91392bc8347f92128a989ae4ee65daf8dec127078c2cfa15b8a2de0b2bf270b5e34b9827e8e0805f8491a1ae69c99e275fa6109e9ee29728cadee3e983552b4643a8a33462e482fce66bafc9c0cc9ed3a2b416905aa45c8ec79c64abefa32fc252bdf1ce5365db9d5529f5800771d77596a4143f28ef569940d9e278b1f01ee79301205beaf35db55c6401cea8fa173aeb9be7eba5ce92c3cfe0ae78698c062d395f06cb5f387c67a0e419cd02347faf4d1d6c908d7e0ff1e6c6b507fb94ad7c6aa5ae0575a1e4a467c641f372cb71c96eddc6535dfd380dd21a84bea65991c89b35e6b2e84baae87cecfe0de7e235da30084e7b2dbf5ff8f555bbb965be2cbd22b625b2e47d5c7818f2fce0bd33e91e0416c71f85ee797c2e567ecb30e0efcf564d45562892045537b6bbdde5a0114a310a56c9d8a7b720284bdcac83b201b4239ac8c74ca28fc8b946c0736d9de0e7a1eb49dad80208cb00e86367287d2b85bc215e0fdc10594950d8e669745b6c0335f4397e55ad7c5d7267d9445c5bc1a0ab82a9e3a8e8d3532e316d4be701d68304360d0b496c0bb517a15baf7015867cb7f9d72e15870bd2ba1b95ebd80afb092849f5187a921687e976edbd0c4b14c0a073fe75d2130cdb31ba8138dc96a7976edd0fe01ec8dee5c411358b1121736f7dcfecd735e514b71db6d8bc071573b86eece7d8e08e2175ca5b28d30b717ed827cb425933b19ed63b4c179ccb818386936328004f8ba1bb91d846994f082385421a48ad05a9771a702e5b419e6d2fa89e6042c9005424cf2ed7bfafe26c430d442ef581a512de400fb171ffe6e872098fcfda445c47785d99b9e27aefc2597220ccb47e5a6a1492649acc52cd02760947e428ea3cd72511ec2ee3125ce511504ece1c225fd60d01ee1416420dfa822146bc2048c53f119e32111bf0a11347192ba76a70efcb69f221c66a1b7c0fe82831cd8a31d37116d26f1fc7848f08cc4ec71917487d552f6bb1dff7f42fe4c0aa64b4b3276529ad4cb513333229fa7d3b988e38fad37b7e3a49c6dfde85285c5e0b64bb92a6c8a8e398cc2f42480d43ac1775b747105df6c159e4292a078b20cbf6935cd0d843a2859cf053133078fded2c42699da234300881d3cbb964c0d19262086ea5aa3eb74935f5ec029b3036cbde84122a14ab3ca1bc2de4a7921846741593a92341050ad495ca6bd6be12a595c0b582bfc2b8bf914f96999fadd9e15d88e8ec396dd3e643e8e266fc32bcd2cc568d3a517d412c5dc8a70cc9b26e2f435aa497f4c916f7354ccbc099f40eafa6bb0f846dea5408cae4f384898e81fbe80574824272f79769da852d9399a795a54a8fdd67412cbb67ab55893be0fc0c024201986df6fab2a1d38a235450f1846c2d0e975c0f387ddb7e225f1b34007d8172a5998166de3195dba57650f30ca51358e293d01ab29a63ff2eb8074c44176bf50d8d31d927e5df3847a235761b4bc13ff5092fe3e41ed43f1e2930a9d80f6bca3b2387668019f51ab75edcdbd8304f624fdfa38bbff6d4000db1f3170fe9a5b7c55cf3b9352007fce400ef1810f16d3f58eddcd4e0db4520ad663657419939f9e9b6d24b63735169962fe9a7d15e2377d095f1e3e4ed57714424056a6165702c98563ba5a1115a348857ee35f67b747150263d07a85706e7becaa78167183e769653e0b563b1a283c66d734ce7f41cb5baf3dcad878afb04a6d7fa950fb1dc89737a193e673ea7968f68e521f14c5bd05e23f74404fba1b5e9cd304fd312cb294d565d9c20d6b0ed9a12012f7b1aa929dc15894dd0d0525b46c1f25fdc34d6e1e213664131850982c6b347101992de850d560a87089396bf2f3bd11a37c6b076f31c6e589131d3e87350522a2613a8fa0335f703e5bb63bbfa96e40437373bb41de1866c34a28ea12f4ffa015bbb011a6f0c6d50aff779eb250f077a39dce7019c28c51f7765783674c097ae552fc57b628659077b", 0x1000}, {&(0x7f0000000100)="345094aa7963c12be67640309a2d224c5e47c036a12d43f53fc36be6e243cd87182fe9077c", 0x25}, {&(0x7f0000000300)="1a736842117cecd1", 0x8}], 0x8, &(0x7f00000070c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x101}, @assoc={0x18, 0x117, 0x4, 0xc753}], 0x1078, 0x10}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000008140)="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", 0x1000}], 0x1, &(0x7f0000000400)=[@iv={0xf0, 0x117, 0x2, 0xd9, "a88a71493de2ab25f6ce21450ee55589c449823c82c03dff33bdc7b8d82043682f67d7ca0b0c2b8c74d087f5885969c0b3b1834ea29a12edc8ed0c9e72876a6136ebceeb37a6eb627401bf0ac036e4b920c08aa734b6c6a76549d6d5ae93325cc1ff51eb01d66154f3323226d8ed5a87d7ac0b7eb89974dcc042645d90c148e54725e0fd21449a9274fd11a63a9905def01813814f908c29cbd736bc50282b9285634d0253b5ec4d8cd9d369474522ba469a330f4d1ef12ac3e317a1422753869322a4fca469b6948f4ea070be1cc4ef8fe383213188e53295"}], 0xf0, 0x20000000}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="bf58a69c70a369c6dbe4ed2015d05d2a2f1e050691e20d179f41bd2e43d1b3b12517336a01760b71bc19ec85ba6dc55d172b75f454e683843d29df4de0217c6c6ab877e1f3a2e1d95118468c1609e01005c5d2c26df685156b56ae9e2bfe5ca56a0704a67f7ac79ea97ea740a2bc49277c4517b3fbba8fb7f6e7d96655fc2f7660d29007d6d74cf128b692b967acfab9d273e8ee9bf9d4d4e8bd0698d1863652eb7e5ad684ba33bf18e6fb764df64f08fb761539cd7ab03624f8dc01db2a6220dfe11d", 0xc3}, {&(0x7f0000000600)="6f32214a353eb14004a615153d86d743fb8eead2740cf3393ef3dccf06cb9c26b7b8749758bd3b6301bb34a02714ac15fe2f17c5ab5af81e5857e45807bfb387744d810db805a369e1ad1316df51a9b77ef029622750245fd188ab683d9b87c3652bdf17c42b4eb221fc", 0x6a}, {&(0x7f0000009140)="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", 0x1000}], 0x3, &(0x7f0000000e80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x400}, @iv={0xa0, 0x117, 0x2, 0x8a, "f9d0da97fe394544e7b2be974fbf7e43f31b0fba47cfef450edd23d7d44bcc6ddb69da577ca96c538b194c178ab02b4563d5631d207b955936228032f8f900385cccc21c3ea043cac463677808c78412da6d857015e41a89500b427b0b62f64a7a6ecc1eb574ea03a3ed81ae4b09f56572a46ca602f691fd1ee937fbcd6677ecd3fc24fd442b91621087"}, @iv={0x100, 0x117, 0x2, 0xeb, "e402d15516d5bedff24da589850961bc2c28eb0b295c1eaf4f0157d1edc5c1a3f622a025a7c6ee9e9c730665cee68f858566f460119fa5a2a2314431e11598df7b0f74aa1ac85d9e3092e56fcc0502b4d06145b9761b5db437cda166d7c728e1e6fccda31943a82020fda9f3d653de837d08ae3d78dea1475daf6b79ca5f81668da21502309dc432199255a05b8912fca5d5f4e4c5c137a65a8115e8459f18228335ef8045cc05231761d3474c4623f6e21fc512e6362de3366c8e4c0b70514f28c8b721c0097af7e8d9f3005f71151b25fcb1132cdfa40ffbfc6fbd35e78aed5d79314129093a5f0e87c0"}], 0x1e8, 0x4010}, {0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000006c0)="53925e413113910129b1dde5a5903661d32c8295dcba893d01a3def59373c9df690b00df5c0403f5ca1679c88ac289be423a339356156c2ef11d9888ec1092195f4b8870ed04dc4944adbe671260b81a8a6ceec3a6fc2c944208f3919c705f78f7c255d6fdb8265882af87a7c9ce55b3e39efd0eac3c89321faadc7742948e346b08a679309776d876ee69b8a48e2f7cfc545822e7ed3789181810f724e15a03c4e927ee47448d436c7d2a389dc1755ea878e8e6be257db5a661695b176e118f9699d18e4d588f8d01e7eba42b2d971731", 0xd1}, {&(0x7f0000001080)="deb670b9caba486fb2c188fb5808b43c2dc1a5bef7c1d49a69efcd22e72774fe410a4de10cbcd6baca549a1c8185e3cc6113d9dfeb78ff989fc9809aef730ef49b6836113422abde1e015cf87e12ccc660a11df0b50a6a62086ee04e507ef01a69ac0f4570d6797013053156dcf8af1e97f902eddd3c278ded5fb4fec06141196d0bed1445", 0x85}, {&(0x7f0000001140)="54e55cdd18ce978026b784f6912decf663f2863536d6b5a37c873e30b93edcb093d4f7b1d293eefe667d2a4ef3c2a1fe17673b54230a", 0x36}, {&(0x7f0000001180)="95665d67fb73cfad059fce219ef68a6618ce4d22f8931f6bcffb2260621ab9d4b7119246204d8c7d563891bc5cafb58725fc44de87486628bb885537b7bace37402ee36c8565f45369a675b979b221f05780d03b3148ea85b5f226c08b214692cd1c2ed1f466a98e4eb58e5a8d81f5132950ecf92e3f0caa4b9a6721a49d45", 0x7f}, {&(0x7f0000001200)="1f03e25a1e5eb1b0b6c7d3aa7b82e773a763844b74953fc2657375fba6b960008e05d02f67141b9bc0f35f79ec8a27e1f6cf5e33f2a1552e3a903c0637de2acdf03c4a978e38233007911fa3732dff0d17c623f6b9c68a4730099a63743aaf", 0x5f}], 0x5, &(0x7f0000001300)=[@assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x8000}, @iv={0x48, 0x117, 0x2, 0x33, "0767721d9339ec05274413d2ac1b6c8b4a8d0ea9809ba0ab7a921e5cdfaa0a2663862f651f2a3a10629d8693ad1055158a308f"}, @assoc={0x18, 0x117, 0x4, 0x8000}, @assoc={0x18, 0x117, 0x4, 0xecd5f86}], 0xa8, 0x10}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000013c0)="10571ceebafe8afab7eff35dde30ea66ae19a4d2d53d098382e5a3ca129c990e28e199e84b286cccdfb8b60fe879698a1f1189abfb2c036b04ac5d074274401b91dff64e6389567abcda3101f333eb9d2f376107ef86854cf5c9e20b39588931f3a13e61abf3fe351e3b1a6d27b128685f1ff84fd96a9856e13e82e7685ebbf6d708eeb2a619fd473c71b0c07408674ab70ab8683ce23658b9bd1f7b9f133edb64114139710114bb2283c542d661c31558a0a99004d22bee497b226e305120beb6c4eddebfa41a6ca3736f319c23be3e16c08a58941937ecc2a840fce1c5e89d0b7024bb1e5db86c8c4238f8d29089540b", 0xf1}, {&(0x7f00000014c0)="420bed2216007fc99959b59faf2bc9d11f7e5beb5184dcb01eb7d2da1b5f4bde8fb915f2360c12fd02f8b080cc0b81a046a4eb0f23510641c09c03b2dd", 0x3d}, {&(0x7f0000001500)="7c6b933bc70219192aa14e209bb258a9f987aa5aa49568bab7f7fb6518d6bd7d97c9b211021112e8bbc26b2ccb12a3e66ce3d9eef36b835bbe5b49e0b2c3dc6faa9678b32844fca68e6d44f6848df0ecb583f9e60c709810685e72e447c4021cf2b2c348e1a493545eb9a710aad70d9ac25b40e8087085f2261a96264e0b74c585e597547e88f63a3d7d1a2416e7a57abf", 0x91}, {&(0x7f00000015c0)="89096e82e81cdb48a0ad944c11b2456f9ade04ab37d302e90b06fdd4ef23525b1dca3960a054f3e7aa233647b2d72343b3bc4cd25c47cb38489123af61c27519f40641b680ab00", 0x47}], 0x4, &(0x7f0000001680)=[@iv={0xf0, 0x117, 0x2, 0xd9, "86f0797e8b71e2d763cba48637ccd7291dc7bf73d1acbe7794160c5f7616a804ccd4512f4d8c17a45d23965fedcb191bacfa5f84bae7ce524313492f2ff5267210e17c65c0c6212513e90cbd34c5787b22c46a01f56ff018a628194570e5792476675cd4963595f7576a72c24bab27971662586bde54e41ff8f864070d39ec18b9eefd926977da84a87903c33d1366a6482c802313a586874956d6470cdefc2148a736b2ea7cbf4baf4c89c78d6d20b9831bb58f99f61eec66e579440e367ee558c2c8850cf1d7e0a313b3518e5f3a660ff982e04a9e78b49f"}], 0xf0, 0x20000800}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001780)="183d45d873df2f57f9ec5c", 0xb}, {&(0x7f0000001880)="9346c679fe2333205d24d8f22128828cb1be9517757208a169b7f90a9631a1f3f294edeebd0d0696a1e165119061f0610a8a67b4cd8e836032227d84323405bc39609467455fa72db22e209f2b0d2509cf11600384812808e2c374f90114a5cefc33014271e4d9f7ed056c081355319114fa7614f371e8c926f525c7102b1e10868aaedbd8f532fa0947e8c5dc27932b522a5a84f87f866e1894175fb73374c2149292fb242ed27f0e92da81bbaa30595a2f9235fb6148f37521e9ebf34be0fb379aa135463a", 0xc6}, {&(0x7f0000001980)="fe4ca4fc17b7313643fa8b3f858b305c6a0735fbec02df3ece391e1c593552885b7754ab52ed2a58db26749ffc315bb0c991015f3195f80e837c9d306cf309057e636eb2e18ee01a11cebcb33ca14e44730b7e6de19369d33bc803995e8fe3e90a648d57a7e3e7638d72f19af5e1087fade762e67f8442bc2754a0146de37748dd45b4cce40c29ffec1ce03aa1a67366", 0x90}], 0x3, &(0x7f0000001a40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1000}], 0x30, 0x41}], 0x6, 0x20040090) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$FUSE_IOCTL(r2, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x5, 0x4, 0x7, 0x7}}, 0x20) [ 440.315823] Unknown ioctl 44802 08:41:47 executing program 4: memfd_create(&(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', '=]proc(\x00'}, 0xf) [ 440.462967] audit: type=1400 audit(1544085707.965:78): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="=" pid=17711 comm="syz-executor4" 08:41:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000080)='md5sum$cpuset\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000180)={{0x7, 0x3, 0x7ff, 0x40, '\x00', 0x6}, 0x4, 0x223, 0x8000, r3, 0x1, 0x4, 'syz1\x00', &(0x7f0000000140)=['\\\x00'], 0x2, [], [0x7, 0x10001, 0x10001, 0x3]}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x108000}) 08:41:48 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:48 executing program 5: chmod(&(0x7f0000000000)='./file0/../file0\x00', 0x13) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x4000, 0x0) 08:41:48 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[]) r0 = getpid() setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000480)=0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000003c0)=r0) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8)=0x720, 0x800000000024) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000000)=""/42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) 08:41:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) [ 440.879762] binder: release 17680:17681 transaction 155 out, still active [ 440.904750] binder: undelivered TRANSACTION_COMPLETE [ 440.912693] binder: undelivered TRANSACTION_ERROR: 29201 08:41:48 executing program 0: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 440.935192] binder: send failed reply for transaction 155, target dead 08:41:48 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfffffffe]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x220, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000180)=0x1000) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) write(r1, &(0x7f0000000140)="d0b775d3b9f04c294fbc3ef5e1842e9859efba92c6300d0c6df1a482b40754f684de2517a8a526bb8dd00710df1005cbb92f40ad2393a6", 0x37) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@mcast2, 0x2}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r3) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 08:41:48 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) r1 = msgget(0x0, 0x22) msgsnd(r1, &(0x7f00000002c0)={0x3, "1aaa7beecbfa27468832f7d570fd80793c2ec06ef85d7b1b3f93cd0cd08e6b64a995aaaac4daa0a286c8898242fd533955325947badb7a01a3973b98c4c8beb7dc6943d8106a4e94ffc27371569c9da5004ed5659a79874d12ce41c9a15d15ab9f6fc5661b046ec103973feee16cd0188159b8dc8e14c1a696df350a111898cd8d2934697c812adfe9860186cc9ad09e7d83b83b99b156cb3720"}, 0xa2, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) lsetxattr$security_smack_transmute(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) set_tid_address(&(0x7f0000000380)) rmdir(&(0x7f0000000080)='./file0\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000280)='./file0/file0\x00', r2}, 0x10) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)={0x3c4dc00000000, 0x2, 0x4, 0x10000, {0x0, 0x7530}, {0x7, 0x0, 0x7, 0x8, 0x8, 0x1, "e3271acd"}, 0x6, 0x0, @offset=0xfffffffffffffff8, 0x4}) umount2(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={&(0x7f0000000440)=[0x8, 0x3, 0x2, 0xff, 0x3, 0x1, 0x8, 0x5], 0x8, 0x3, 0x0, 0x6c7, 0x9, 0x80, {0x2, 0x80000000, 0x7ff, 0xffffffff, 0x4, 0x2, 0xfffffffffffff750, 0x9, 0x100, 0x8000, 0x20000000, 0x2, 0x80, 0x1ff, "135aa5d7594f0794cd13156508d8837c9ed01e6fd658be400d110143f557ec92"}}) [ 441.030978] binder: 17731:17739 got reply transaction with no transaction stack [ 441.039253] binder: 17731:17739 transaction failed 29201/-71, size 32-8 line 2741 08:41:48 executing program 3: ustat(0x1007bcc, &(0x7f0000000080)) r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/16, &(0x7f0000000000)=0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4a140, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x0, 0xfffffffffffffe11, 0x6}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_to_team\x00'}}) 08:41:48 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2800]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 441.154327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.187532] QAT: Invalid ioctl [ 441.212493] QAT: Invalid ioctl [ 441.274980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.370859] IPVS: ftp: loaded support on port[0] = 21 [ 441.672100] IPVS: ftp: loaded support on port[0] = 21 [ 441.692704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:41:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:49 executing program 3: syz_emit_ethernet(0x300600, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090000062f0000000000000000000000ffffe0000002ff020000000000000200000000000001830090780009040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/249, 0x2000, 0x800, 0x800}, 0x18) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x0, 0x7fffffff, 0x4}) fsetxattr(r1, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000280)='/dev/vhci\x00', 0xa, 0x1) 08:41:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1, 0x8, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x957, 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x1ff, 0x3}, 'port1\x00', 0x0, 0x800, 0x3, 0x7b, 0x180000000000, 0xbed, 0x8, 0x0, 0x0, 0x6}) listen(r0, 0x200000000002) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xdbcb}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r6, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000440)={0x3, r7}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c"], 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8cce, 0x0, 0x80000000, 0x0, 0x0, 0x7f}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000480)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000500)=""/37) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x1ff}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000240)={0x40, 0x3000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 08:41:49 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2c00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 441.811524] binder: release 17731:17732 transaction 158 out, still active [ 441.818527] binder: undelivered TRANSACTION_COMPLETE [ 441.860527] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.885639] binder: send failed reply for transaction 158, target dead [ 441.956695] binder: 17769:17776 got reply transaction with no transaction stack [ 441.973347] binder: 17769:17776 transaction failed 29201/-71, size 32-8 line 2741 08:41:49 executing program 4: r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x1f, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0xa, 0x6, [{0x697, 0x0, 0x6}, {0x3, 0x0, 0x80}, {0x100000000, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x3, 0x0, 0xfff}, {0x3, 0x0, 0xbbe}, {0x7ff, 0x0, 0xfffffffffffffffe}, {0x25f4, 0x0, 0x25}, {0x1000, 0x0, 0x5}, {0x5, 0x0, 0x5}]}) getpriority(0x1, r0) 08:41:49 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x29]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x298, 0x1c8, 0xd0, 0x298, 0x298, 0x368, 0x368, 0x368, 0x368, 0x368, 0x5, &(0x7f00000006c0), {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @multicast1, @icmp_id}}}}, {{@ip={@local, @dev, 0x0, 0x0, 'team_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @port, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 08:41:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1, 0x8, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x957, 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x1ff, 0x3}, 'port1\x00', 0x0, 0x800, 0x3, 0x7b, 0x180000000000, 0xbed, 0x8, 0x0, 0x0, 0x6}) listen(r0, 0x200000000002) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000004c0)={r4, 0xdbcb}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r6, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000440)={0x3, r7}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c"], 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8cce, 0x0, 0x80000000, 0x0, 0x0, 0x7f}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000480)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000500)=""/37) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x1ff}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000240)={0x40, 0x3000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) [ 442.668092] binder: release 17769:17771 transaction 161 out, still active [ 442.675157] binder: undelivered TRANSACTION_COMPLETE [ 442.680409] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.693806] binder: send failed reply for transaction 161, target dead 08:41:51 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="800000000000000000000000c400000034c21a3433d7032524a62315cd6dd9e4ac4afdadb32e425b7bff6c91fad2a67c3880e1402458fbca911e5575874d79ede0ecc2509466c5c074dc6bbf9834c4c2e1b6bc0fe1cc7027601f04d941fbc4156907a7649d7843060000000000000020c3fbce1c471de6b8bf2afe2d9f9df700"], 0x80}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) 08:41:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x17) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840080}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) listen(r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xfaa, 0x40000) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 08:41:51 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x200000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:51 executing program 4: socketpair$unix(0x1, 0x80000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000003, 0x7) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000140)=""/9) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000080)=""/50) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0xb, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) 08:41:51 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000, 0xfffffffffffffffc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') write$sndseq(r1, &(0x7f0000000180)=[{0x7, 0x100000000, 0x1, 0x0, @tick=0x8, {0xffffffff, 0xd89}, {0x1, 0x6}, @connect={{0x7ad, 0x3}, {0x2, 0x8000}}}, {0x3, 0x3, 0xffffffffffff24c7, 0x4, @tick=0x1, {0x69, 0x9}, {0x1, 0x2}, @addr={0x0, 0xf31}}, {0x5, 0x598, 0x2, 0x5, @tick, {0x8, 0x2}, {0xf075, 0x9}, @ext={0xea, &(0x7f0000000080)="2bd16d4aeb7323c5350aed7022e02ac9cb85b6e5a8d3a4530e9a4eb02e07c071de678824c77f1ac5da733025d57b0e6364fb21998c383194e7f6b835edb21fa1db7451f77558f09b06e0e85247a4b1e4c5f455e5cda8c286b0e5dc621c59f9dde5ca07c3f6dba31172bc2b5fcb0617adf79c5e97a509642aac9c165c0412259986766890737e16b9fc3c24270253a3ecd03341a619cf3b9087f6b90fcef91f667f50ceb2469369a7f54822cfe90391a7eb848384821ca6454cc48bf91d554e7813bbe1747ad8be67f0a8bc78444b5a7d1e41088090782c6aba2cfb4c2b4847d94c339fa6a32ca2a0793f"}}], 0x90) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0xd2) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) 08:41:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:52 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x6bcc0000000000, 0x208000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x4, 0x0, 0x100, 0x170, 0x3, 0x0, 0x5, 0x6, 0x3406, 0xed1, 0x2, 0x0, 0x8, 0x0, 0x1000}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x4000) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000040)={{0x115002, 0x6045e93d223ce124, 0x10, 0x3, 0x5c, 0x6, 0x0, 0x15c, 0x9, 0xa14, 0x10001, 0x8c}, {0x100000, 0x10000, 0xc, 0x1000, 0x3, 0x200, 0x9, 0x1, 0x0, 0x2, 0x7, 0xdb91}, {0xf000, 0xf000, 0x1f, 0x401, 0xfffffffffffffffa, 0x9, 0x9, 0x100, 0x76df, 0x1, 0x8, 0x2}, {0x13001, 0x3000, 0x0, 0x9, 0x7, 0x1, 0xe4, 0x9, 0x4f0, 0x7f, 0x8, 0x10000}, {0x5000, 0x10000, 0xc, 0x3ff, 0x4, 0x6, 0x401, 0xe5, 0x1000, 0xffffffffffff836d, 0x80, 0x3ff}, {0x5000, 0x0, 0x1d, 0x4e, 0x9, 0xffff0000000, 0x1, 0x1, 0x1f, 0x1, 0xc25, 0x8}, {0x100000, 0x1, 0xc, 0x6, 0x0, 0x8, 0x7, 0x1, 0x8000, 0x1000, 0x8a8b, 0xffffffffffff7fff}, {0xd000, 0x0, 0x8, 0x400, 0x3f, 0x5, 0x87, 0x100000001, 0xfffffffffffffffc, 0x5, 0x8000, 0x2}, {0x112000, 0x3000}, {0x0, 0x2}, 0x80000000, 0x0, 0x3000, 0x4000, 0xf, 0x4000, 0x3000, [0x1, 0x2, 0x0, 0x4]}) 08:41:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8864]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 444.453417] binder: 17803:17814 got reply transaction with no transaction stack [ 444.469243] binder: 17803:17814 transaction failed 29201/-71, size 32-8 line 2741 08:41:52 executing program 0: getgid() stat(0x0, &(0x7f0000000400)) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x9b, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)="7af23c5cb1cad1bb17f5a8e1684e906f1c5b775115b8a1eac5d08bb5c6b2e9fe67a5c20bf98fea9c237e7b69f7ae4655e564b2dbdae2be6814af1bf185cb2823c9d5ce9bc0e0b4a4ad518a74babaedd88fdc1feef91b598ce1129e5084d1bebefa09fc78eeb798151fad0d5e30970ac85a06760ece4444", 0x77, 0x80000000}], 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0000000e0000108b802cf45aa26862c5940f98f55a065842375572831b80422618716550f699470344c6c504d69b47dac6c658419836908fbd0cd1a98c7cc7f744d565fc2d1a6f4e8805050a29f38f17efc8eb94d83f91c19fcea80fcdec89abefcf2fdf8f3c2d9c3be1cb6ff23f627fc54a4600601ec2d003000000000000000000000000000000000000"]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000), 0x0, 0x1c0}]) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x5) 08:41:52 executing program 3: perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x3) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000000)=0x4) 08:41:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x300000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000000}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000080)=""/227, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) close(r0) 08:41:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000000}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000080)=""/227, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) close(r0) 08:41:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x20800, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000200), 0x4) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r3, 0x40107447, &(0x7f0000000000)=""/174) r4 = dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0xf, 0x4) 08:41:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xa4ffffff00000000]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x2c3) 08:41:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3c00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000000}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000080)=""/227, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) close(r0) 08:41:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x800000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) syz_open_pts(r2, 0x40) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 08:41:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x200, 0x6, 0x3, 0x9, 0x8, 0x1, 0x1, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x10000, 0x0, 0x0, 0x8001, 0x400}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0xffffffffffffff80, 0x2}, &(0x7f0000000300)=0x8) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000440)=0x4, 0x4) write$FUSE_DIRENT(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="5800000000000000020000000000000003000000000000000180000000b063000c000000ffffff7f29406c6f76626f786e6574300000000005000000000000001f00000000000000050000000600000070726f635b000000"], 0x58) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='tsusted.xcbc(aes)\x00'], &(0x7f0000000400)=""/62, 0x3e) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r4 = dup2(r1, r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000000)=[0x10000, 0x4], 0x2, 0xfffffffffffffffd, 0x9, 0x5, 0x3, 0x80, {0x6, 0x7fff, 0x200, 0x7, 0x0, 0x100000000, 0x6, 0xfffffffffffffff8, 0x1, 0x9, 0x40, 0x2, 0x8, 0x7, "da2196d761a6531cfc0710db64f7f0c8b7e47172310d0aee8515e3216416d647"}}) 08:41:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000000}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000080)=""/227, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) close(r0) 08:41:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x44) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffc, 0x6, 0x900000000000000, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000100)="482e2cf215c6", 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3, 0x4) [ 445.211458] binder: release 17803:17807 transaction 164 out, still active [ 445.248187] binder: undelivered TRANSACTION_COMPLETE [ 445.270533] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.276073] binder: send failed reply for transaction 164, target dead [ 445.284374] input input12: cannot allocate more than FF_MAX_EFFECTS effects 08:41:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000000000}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000080)=""/227, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48) close(r0) 08:41:52 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x101, 0x0, 0x400, 0x37, r0, 0x9d}, 0x2c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r1, 0x0, 0x0) [ 445.317147] binder: 17873:17874 ERROR: BC_REGISTER_LOOPER called without request [ 445.348956] input input15: cannot allocate more than FF_MAX_EFFECTS effects 08:41:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 445.362092] binder: 17873:17878 got reply transaction with no transaction stack [ 445.369599] binder: 17873:17878 transaction failed 29201/-71, size 32-8 line 2741 08:41:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x5f) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semget(0x1, 0x200000000000003, 0x0) semctl$GETPID(0x0, 0xffffffffffffffff, 0xb, 0x0) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000780), 0x0, 0xfffffffffffffff8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000340)={'bridge_slave_1\x00', {0x2, 0x0, @multicast1}}) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1014001, &(0x7f00000001c0)=ANY=[@ANYBLOB="88"]) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000840)) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 08:41:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:52 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0xe0e5, 0x4) close(0xffffffffffffffff) 08:41:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x5]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 445.563216] binder: release 17873:17874 transaction 167 out, still active [ 445.570233] binder: undelivered TRANSACTION_COMPLETE 08:41:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x9, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c400000000092"], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) r3 = gettid() r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000240)={r4, r1, 0x65}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0ef300"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x302, 0x0) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000100)={0x8001, 0x4, 0x7}) 08:41:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) close(r0) [ 445.612224] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.625687] binder: send failed reply for transaction 167, target dead 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4305000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 445.670975] binder: 17906:17907 ERROR: BC_REGISTER_LOOPER called without request [ 445.689599] binder: 17906:17907 got reply transaction with no transaction stack 08:41:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 445.719598] binder: 17906:17907 transaction failed 29201/-71, size 32-8 line 2741 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1400000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 445.836180] binder: release 17906:17907 transaction 170 out, still active [ 445.853422] binder: undelivered TRANSACTION_COMPLETE 08:41:53 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0xfa, 0x30, 0x0, 0xffff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x8, 0x9}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x8, &(0x7f00000002c0)="0a5c2d02403162857170701c59a400409ca9db7f6dae7fbd8360c6a1d1986e5c08eec082b0a1f1b1de384d36e0b6accd6c19b55ea2ddc775f8d64c031383335a2d957d0435376eb2e5ff0d7344511af57b786d6405019787eb71969df43bb766d70e365ad1e411018449919cd59307dd72213cd8bf17266327d5fcb88a5cea059f2a3f80fa44720071c20d900c18a9bd979e77ef5c709180c2f5da2df010f500da450a32aabff9dd93563229c03752c03548de220f7f41c547eb") r3 = semget$private(0x0, 0x1, 0x400) semop(r3, &(0x7f0000000040)=[{0x4, 0x1, 0x1800}], 0x1) r4 = socket$inet6(0xa, 0x803, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x2000) socket$inet6(0xa, 0x2, 0x7) unshare(0x8000000) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={"677265300000000000000000000000ff", &(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009JyyJ9\x00']}) [ 445.877149] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.903643] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 445.912253] binder: send failed reply for transaction 170, target dead [ 445.939201] binder: 17923:17925 ERROR: BC_REGISTER_LOOPER called without request [ 445.958644] binder: 17923:17925 got reply transaction with no transaction stack [ 445.967146] binder: 17923:17925 transaction failed 29201/-71, size 32-8 line 2741 [ 446.061245] binder: release 17923:17925 transaction 173 out, still active [ 446.068202] binder: undelivered TRANSACTION_COMPLETE [ 446.101205] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.126008] binder: send failed reply for transaction 173, target dead [ 446.141105] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 08:41:53 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x8e9, 0x208000) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x50}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x8}, 0x8) 08:41:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) close(r0) 08:41:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x14000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:53 executing program 0: r0 = socket(0x80000004, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) gettid() socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r1}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x1d, @local, 0x4e21, 0x0, 'wlc\x00', 0x16, 0x2, 0x5a}, {@multicast1, 0x4e22, 0x3, 0x5, 0xfffffffffffffff8, 0x7fff}}, 0x44) ioctl(r2, 0x1, &(0x7f0000000400)="59a3f2ccd3d811c992f9a510ce64db9128e74f23a214a6baddb4f12d4d73ad7bdfdc144bea87200156563c4c4c34bcead91f3ebb6affe18d8a21b1a4c8f7b41294198a5835f2351551ff86b5e19403e8011459e5cc36a9a688e2429cdfb9f2bf8e9fc19b4c28d339b5ac3648a346ba40e5f87434beeed5cb989ba8a95c3fccfb579814caac45be9a991f77724f09f0e5dbf9a6768e80eb9b37ff2607752b05a196730f6360b43a77ab62") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x218, 0x4) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000062b000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet(0x15, 0x5, 0x0) 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3c000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 446.262944] binder: 17951:17952 ERROR: BC_REGISTER_LOOPER called without request 08:41:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) close(r0) [ 446.347925] binder: 17951:17952 got reply transaction with no transaction stack [ 446.367497] netlink: 'syz-executor5': attribute type 40 has an invalid length. 08:41:53 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8848]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 446.390479] binder: 17951:17952 transaction failed 29201/-71, size 32-8 line 2741 [ 446.400193] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. 08:41:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) 08:41:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 446.456465] binder: release 17951:17952 transaction 176 out, still active [ 446.470366] binder: undelivered TRANSACTION_COMPLETE [ 446.478195] netlink: 'syz-executor5': attribute type 40 has an invalid length. [ 446.500522] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.510508] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 446.526293] binder: send failed reply for transaction 176, target dead [ 446.585182] binder: 17975:17980 ERROR: BC_REGISTER_LOOPER called without request [ 446.598437] binder: 17975:17980 got reply transaction with no transaction stack [ 446.606644] binder: 17975:17980 transaction failed 29201/-71, size 32-8 line 2741 08:41:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xf5d, 0x401) 08:41:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 446.634835] binder: release 17975:17980 transaction 179 out, still active [ 446.642326] binder: undelivered TRANSACTION_COMPLETE [ 446.654745] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.671959] binder: send failed reply for transaction 179, target dead 08:41:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x6]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:54 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0xffffffffffffc7ed}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) [ 446.764782] binder: 17987:17990 ERROR: BC_REGISTER_LOOPER called without request [ 446.803046] binder: 17987:17990 got reply transaction with no transaction stack [ 446.828526] binder: 17987:17990 transaction failed 29201/-71, size 32-8 line 2741 [ 446.867766] binder: release 17987:17990 transaction 182 out, still active [ 446.884542] binder: undelivered TRANSACTION_COMPLETE 08:41:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000080)={0x5, 0xfff, 0x0, 0x6, 0x0, 0x9, 0xd13f, 0x80000000}, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0x0, 0x1f}, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000140)) r1 = socket(0x1000000000000a, 0x80000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000680)) getpid() wait4(0x0, 0x0, 0x7, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x13, 0x8, 0x401, 0x0, 0x101}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0x8, 0x10}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="fd2c00", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r1, 0x7, 0x9e) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x1000, 0x40, 0x0, 0x0, 0x6, 0x0, 0x539]}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f0000000700)='./file0/file0\x00', 0x4000000040000, 0x8100) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0fffffffffffe}, [@NDA_LLADDR={0xc, 0x2, @local}]}, 0x28}}, 0x0) 08:41:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa0008000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:54 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8001, 0x4000) getsockopt$inet6_int(r0, 0x29, 0x80000005, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xfffffffffffff800, 0x2800) [ 446.913395] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.940445] binder: send failed reply for transaction 182, target dead 08:41:54 executing program 3: bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(0xffffffffffffffff) 08:41:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2000) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x1) [ 447.024953] binder: 18010:18015 ERROR: BC_REGISTER_LOOPER called without request 08:41:54 executing program 4: setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfeffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 447.181569] binder: release 18010:18015 transaction 185 out, still active [ 447.201123] binder: undelivered TRANSACTION_COMPLETE 08:41:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf0ffffffffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x141000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x350, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) userfaultfd(0x80000) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x7) [ 447.245052] binder: release 18010:18015 transaction 185 in, still active [ 447.268236] binder: send failed reply for transaction 185, target dead 08:41:54 executing program 4: setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:54 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 447.309342] binder: 18039:18042 ERROR: BC_REGISTER_LOOPER called without request [ 447.365467] binder: 18039:18046 ioctl c0306201 0 returned -14 08:41:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x10000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 447.488992] binder: release 18039:18042 transaction 187 in, still active [ 447.502203] binder: send failed reply for transaction 187 to 18039:18042 08:41:55 executing program 4: setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 447.534620] binder: undelivered TRANSACTION_COMPLETE 08:41:55 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x21000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 447.574412] binder: undelivered TRANSACTION_ERROR: 29189 08:41:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x141000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x350, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) userfaultfd(0x80000) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x7) [ 447.640475] binder: 18063:18064 ERROR: BC_REGISTER_LOOPER called without request 08:41:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:41:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88caffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 447.725840] binder: release 18063:18064 transaction 189 out, still active [ 447.735995] binder: undelivered TRANSACTION_COMPLETE [ 447.756389] binder: release 18063:18064 transaction 189 in, still active 08:41:55 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 447.820684] binder: send failed reply for transaction 189, target dead 08:41:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x87ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:55 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @mcast2, 0x2}, {0xa, 0x4e20, 0x9, @mcast1, 0xba4b}, r1, 0x800}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) [ 447.896277] binder: 18087:18091 ERROR: BC_REGISTER_LOOPER called without request 08:41:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:55 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 448.032762] binder: release 18087:18091 transaction 191 in, still active [ 448.039809] binder: send failed reply for transaction 191 to 18087:18091 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8847000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) 08:41:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) close(r0) [ 448.090642] binder: undelivered TRANSACTION_COMPLETE [ 448.095771] binder: undelivered TRANSACTION_ERROR: 29189 08:41:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:55 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2900000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) [ 448.255600] binder: release 18110:18116 transaction 193 out, still active [ 448.269185] binder: undelivered TRANSACTION_COMPLETE 08:41:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) [ 448.309806] binder: release 18110:18116 transaction 193 in, still active 08:41:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) close(r0) 08:41:55 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:55 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 448.358661] binder: send failed reply for transaction 193, target dead 08:41:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xc00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) 08:41:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) 08:41:56 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) [ 448.519145] binder: release 18129:18134 transaction 195 out, still active [ 448.527750] binder: undelivered TRANSACTION_COMPLETE [ 448.537514] binder: send failed reply for transaction 195, target dead 08:41:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) close(r0) 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3f00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:56 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) 08:41:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) 08:41:56 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x8}}}, 0x84) 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3a00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 448.729569] binder: undelivered TRANSACTION_COMPLETE [ 448.737554] binder: send failed reply for transaction 197, target dead 08:41:56 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)}, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340), 0x10) close(r0) 08:41:56 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) 08:41:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) [ 448.902441] binder: undelivered TRANSACTION_COMPLETE [ 448.907992] binder: send failed reply for transaction 199, target dead 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x84ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 449.004120] binder: 18180:18184 got transaction with invalid offset (0, min 0 max 0) or object. 08:41:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340), 0x10) close(r0) 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xd000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:56 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x28}}, 0x0) [ 449.077783] binder: 18180:18184 transaction failed 29201/-22, size 0-8 line 3036 08:41:56 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 449.121681] binder: send failed reply for transaction 201 to 18180:18184 08:41:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340), 0x10) close(r0) 08:41:56 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 449.209338] binder: undelivered TRANSACTION_COMPLETE [ 449.215134] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.226654] binder: undelivered TRANSACTION_ERROR: 29190 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88a8ffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:56 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 08:41:56 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88470000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 449.356187] binder: 18208:18213 got transaction with invalid offset (0, min 0 max 0) or object. [ 449.393782] binder: 18208:18213 transaction failed 29201/-22, size 0-8 line 3036 08:41:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(0xffffffffffffffff) [ 449.437084] binder: send failed reply for transaction 204 to 18208:18213 08:41:57 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:57 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x600]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 449.558898] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.580779] binder: undelivered TRANSACTION_ERROR: 29190 08:41:57 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:41:57 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x64]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 449.769938] binder: 18240:18245 got transaction with invalid offset (0, min 0 max 0) or object. 08:41:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, 0x0) [ 449.824740] binder: 18240:18245 transaction failed 29201/-22, size 0-8 line 3036 [ 449.839441] binder: BINDER_SET_CONTEXT_MGR already set [ 449.852597] binder: 18248:18253 ioctl 40046207 0 returned -16 08:41:57 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xaa7, 0x10}, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf5ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 449.868867] binder: send failed reply for transaction 207 to 18240:18245 08:41:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:41:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 449.976936] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.002366] binder: undelivered TRANSACTION_ERROR: 29190 [ 450.007938] binder: send failed reply for transaction 209 to 18248:18258 [ 450.037673] binder: undelivered TRANSACTION_ERROR: 29189 08:41:57 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3a00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:57 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)}, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 08:41:57 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 450.179748] binder: 18273:18277 got transaction with invalid offset (0, min 0 max 0) or object. [ 450.200466] binder: BINDER_SET_CONTEXT_MGR already set [ 450.210868] binder: 18274:18279 ioctl 40046207 0 returned -16 08:41:57 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe80]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 450.229002] binder: 18273:18277 transaction failed 29201/-22, size 0-8 line 3036 [ 450.246755] binder: send failed reply for transaction 211 to 18273:18277 [ 450.256375] FAULT_INJECTION: forcing a failure. [ 450.256375] name failslab, interval 1, probability 0, space 0, times 0 [ 450.279443] CPU: 1 PID: 18286 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 450.288082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.288090] Call Trace: [ 450.288117] dump_stack+0x244/0x39d [ 450.288140] ? dump_stack_print_info.cold.1+0x20/0x20 [ 450.308892] ? debug_smp_processor_id+0x1c/0x20 [ 450.313573] ? perf_trace_lock+0x14d/0x7a0 [ 450.317833] should_fail.cold.4+0xa/0x17 [ 450.321918] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.327041] ? lock_is_held_type+0x210/0x210 [ 450.331474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.331492] ? check_preemption_disabled+0x48/0x280 [ 450.331514] ? debug_smp_processor_id+0x1c/0x20 [ 450.331530] ? perf_trace_lock+0x14d/0x7a0 [ 450.331550] ? find_held_lock+0x36/0x1c0 [ 450.355072] ? perf_trace_sched_process_exec+0x860/0x860 [ 450.360562] __should_failslab+0x124/0x180 [ 450.364834] should_failslab+0x9/0x14 [ 450.368654] __kmalloc_track_caller+0x2d1/0x760 [ 450.373355] ? __fget+0x4aa/0x740 [ 450.376846] ? lock_downgrade+0x900/0x900 [ 450.381006] ? check_preemption_disabled+0x48/0x280 [ 450.386157] ? snd_ctl_ioctl+0x25a/0x1110 [ 450.390343] memdup_user+0x2c/0xa0 [ 450.393904] snd_ctl_ioctl+0x25a/0x1110 [ 450.397926] ? snd_ctl_elem_add_user+0x170/0x170 [ 450.402698] ? __fget+0x4d1/0x740 [ 450.406173] ? ksys_dup3+0x680/0x680 [ 450.409915] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 450.414869] ? snd_ctl_elem_add_user+0x170/0x170 [ 450.414889] do_vfs_ioctl+0x1de/0x1790 [ 450.414917] ? ioctl_preallocate+0x300/0x300 [ 450.423548] ? __fget_light+0x2e9/0x430 [ 450.423565] ? fget_raw+0x20/0x20 [ 450.423586] ? __sb_end_write+0xd9/0x110 [ 450.423610] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.444983] ? fput+0x130/0x1a0 [ 450.447769] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.448276] ? do_syscall_64+0x9a/0x820 [ 450.457713] ? do_syscall_64+0x9a/0x820 [ 450.461698] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 450.466289] ? security_file_ioctl+0x94/0xc0 [ 450.470715] ksys_ioctl+0xa9/0xd0 [ 450.474175] __x64_sys_ioctl+0x73/0xb0 [ 450.478084] do_syscall_64+0x1b9/0x820 [ 450.482009] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.487376] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.492313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.497165] ? trace_hardirqs_on_caller+0x310/0x310 [ 450.502204] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.507229] ? prepare_exit_to_usermode+0x291/0x3b0 [ 450.512259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.517118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.522313] RIP: 0033:0x457569 [ 450.525513] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.544445] RSP: 002b:00007f442aa3ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.552172] RAX: ffffffffffffffda RBX: 00007f442aa3ec90 RCX: 0000000000457569 [ 450.559472] RDX: 000000002000c000 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 450.566759] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 450.574033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f442aa3f6d4 08:41:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfffffff5]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)}, 0x0) 08:41:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 450.581321] R13: 00000000004c8d90 R14: 00000000004d1b08 R15: 0000000000000004 08:41:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8dffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:58 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 450.682268] binder: BINDER_SET_CONTEXT_MGR already set [ 450.687682] binder: 18299:18302 ioctl 40046207 0 returned -16 [ 450.718249] binder_alloc: 18273: binder_alloc_buf, no vma [ 450.740648] binder: 18299:18302 transaction failed 29189/-3, size 0-0 line 2973 [ 450.764545] binder_thread_write: 10 callbacks suppressed [ 450.764554] binder: 18299:18302 ERROR: BC_REGISTER_LOOPER called without request [ 450.814670] binder: 18299:18310 got reply transaction with no transaction stack [ 450.838674] binder: 18299:18310 transaction failed 29201/-71, size 0-8 line 2741 [ 450.853765] binder: undelivered TRANSACTION_ERROR: 29190 [ 450.859407] binder: send failed reply for transaction 213 to 18274:18279 08:41:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:41:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)}, 0x0) 08:41:58 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4000000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)}, 0x0) 08:41:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x900]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 451.095323] binder: 18319:18323 ERROR: BC_REGISTER_LOOPER called without request [ 451.228139] binder: send failed reply for transaction 217, target dead 08:41:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:41:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[]}}, 0x0) 08:41:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, 0x0) 08:41:58 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:41:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0405519, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:58 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2c]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:59 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3a]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105511, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[]}}, 0x0) [ 451.596347] binder: 18346:18352 ERROR: BC_REGISTER_LOOPER called without request 08:41:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 451.641846] binder: 18346:18357 got reply transaction with no transaction stack [ 451.678516] binder: 18346:18357 transaction failed 29201/-71, size 0-8 line 2741 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x80045500, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], 0x0}}}], 0x0, 0x0, 0x0}) 08:41:59 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffdd86]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x715001, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x2, 0x80000000, &(0x7f0000000040)="bc4321754c726ed968d492ae604621e4708fd55f8781fc372e5d73b98d9f951ce4937aa0afd46fb48599d9a597be403cacfde7786660eb77c98f171d082194d85d9fd0a3b4db4aa1f57245b6738e881cebcbc5f52e72bfba7f8122652669c68a5b223be6f19ee088311d3bea01b8dd558ff8a31be5ea59a052aca70e3bb8199dfeff7b9a3254721b4881992ee18e6ba673d93a57565acc1fac1fe2937f206fffcb209f5e117a09a1d74d4d16774584f888b34ddd8022b7893bd74f15739bbc5774ea91711bf5a231cfc7ff8c117b881f0feee0f3fa1c19d10fdcfb2d0e601735b0dc25eff34d661899095f5af0", 0xfffffffffffffffa, 0xfffffffffffffffc, 0x67d, 0x3, 0xfffffffffffffffc, 0x8, 0x28, "f6d5f165fdfa9a1e1ece6f61c55a6c7041918cf43c394b303174d554f5bb9c0ffb3544ef6e4d5ae97e1545343a1502789c5341fd5e53dd70faf8f22ee21529e678442a197c62b48621af22de40d9fb9a58938186374352dcf1372cffdafd05f06557254cde52950812bffe4b4fd7fb1e8246b2672665dcc6820d3c97cac27f1adc776cbd6a59241d9637b6d69f7e265bdc52b35adec26b923dba126046d078c2cb1d6933fcc6dfb913a4"}) 08:41:59 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[]}}, 0x0) 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045878, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 451.859849] binder: send failed reply for transaction 219, target dead [ 451.929900] FAULT_INJECTION: forcing a failure. [ 451.929900] name failslab, interval 1, probability 0, space 0, times 0 [ 451.994566] CPU: 0 PID: 18381 Comm: syz-executor4 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 452.003183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.012548] Call Trace: [ 452.015153] dump_stack+0x244/0x39d [ 452.018818] ? dump_stack_print_info.cold.1+0x20/0x20 [ 452.024029] ? debug_smp_processor_id+0x1c/0x20 [ 452.028715] ? perf_trace_lock+0x14d/0x7a0 [ 452.032965] should_fail.cold.4+0xa/0x17 [ 452.037044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.042168] ? lock_is_held_type+0x210/0x210 [ 452.046604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.052162] ? check_preemption_disabled+0x48/0x280 [ 452.057198] ? debug_smp_processor_id+0x1c/0x20 [ 452.061891] ? perf_trace_lock+0x14d/0x7a0 [ 452.066143] ? find_held_lock+0x36/0x1c0 [ 452.070243] ? perf_trace_sched_process_exec+0x860/0x860 [ 452.075722] __should_failslab+0x124/0x180 [ 452.079973] should_failslab+0x9/0x14 [ 452.083832] __kmalloc_track_caller+0x2d1/0x760 [ 452.088550] ? __fget+0x4aa/0x740 [ 452.089185] binder: 18375:18392 transaction failed 29189/-22, size 0-0 line 2834 [ 452.092017] ? lock_downgrade+0x900/0x900 [ 452.092034] ? check_preemption_disabled+0x48/0x280 [ 452.092054] ? snd_ctl_ioctl+0x25a/0x1110 [ 452.092077] memdup_user+0x2c/0xa0 [ 452.092099] snd_ctl_ioctl+0x25a/0x1110 [ 452.119574] binder: 18375:18387 ERROR: BC_REGISTER_LOOPER called without request [ 452.120448] ? snd_ctl_elem_add_user+0x170/0x170 [ 452.120473] ? __fget+0x4d1/0x740 [ 452.120497] ? ksys_dup3+0x680/0x680 [ 452.120523] ? __mutex_unlock_slowpath+0x197/0x8c0 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5452, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x4d40) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) close(r0) 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5421, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:41:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0xffffffffffffffe5) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x3, 0x8, 0x0, 0x4ca, 0x200, 0x2, 0x40, 0x0}, &(0x7f00000000c0)=0x20) prctl$PR_SET_KEEPCAPS(0x8, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r2, 0xfe, "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"}, &(0x7f0000000240)=0x106) [ 452.144889] ? snd_ctl_elem_add_user+0x170/0x170 [ 452.149658] do_vfs_ioctl+0x1de/0x1790 [ 452.153583] ? ioctl_preallocate+0x300/0x300 [ 452.158007] ? __fget_light+0x2e9/0x430 [ 452.160420] binder: 18375:18387 got reply transaction with no transaction stack [ 452.161992] ? fget_raw+0x20/0x20 [ 452.162016] ? __sb_end_write+0xd9/0x110 [ 452.162045] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.178941] binder: 18375:18387 transaction failed 29201/-71, size 32-0 line 2741 [ 452.182512] ? fput+0x130/0x1a0 [ 452.182530] ? do_syscall_64+0x9a/0x820 [ 452.182546] ? do_syscall_64+0x9a/0x820 [ 452.182564] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 452.182600] ? security_file_ioctl+0x94/0xc0 [ 452.182621] ksys_ioctl+0xa9/0xd0 [ 452.213875] __x64_sys_ioctl+0x73/0xb0 [ 452.217781] do_syscall_64+0x1b9/0x820 [ 452.221701] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.227078] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.232023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.236879] ? trace_hardirqs_on_caller+0x310/0x310 08:41:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], 0x0}}}], 0x0, 0x0, 0x0}) 08:41:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x800455d1, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 452.241912] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 452.246949] ? prepare_exit_to_usermode+0x291/0x3b0 [ 452.251987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.256859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.262061] RIP: 0033:0x457569 [ 452.265817] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.284734] RSP: 002b:00007f73ea337c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:41:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='pids.events\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000002080)={0x7fff, 0xfffffffffffffffc}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r1) recvmmsg(r1, &(0x7f0000001d40)=[{{&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000680)=""/97, 0x61}], 0x8, &(0x7f0000000780), 0x0, 0x3}, 0x3}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/80, 0x50}], 0x1, &(0x7f0000000900)=""/208, 0xd0, 0x1}, 0x5}, {{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/213, 0xd5}, {&(0x7f0000000b80)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/9, 0x9}], 0x3, &(0x7f0000000c40)=""/154, 0x9a, 0x1}, 0xc0}, {{&(0x7f0000000d00)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000000e40)=""/166, 0xa6}, {&(0x7f0000000f00)=""/96, 0x60}, {&(0x7f0000000f80)=""/156, 0x9c}, {&(0x7f0000001040)=""/71, 0x47}, {&(0x7f00000010c0)=""/185, 0xb9}, {&(0x7f0000001180)=""/30, 0x1e}, {&(0x7f00000011c0)=""/106, 0x6a}, {&(0x7f0000001240)=""/140, 0x8c}, {&(0x7f0000001300)=""/117, 0x75}], 0xa, &(0x7f0000001440)=""/35, 0x23, 0x230f}, 0x4}, {{&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001500)=""/157, 0x9d}, {&(0x7f00000015c0)=""/151, 0x97}, {&(0x7f0000001680)=""/52, 0x34}, {&(0x7f00000016c0)=""/2, 0x2}], 0x4, &(0x7f0000001740)=""/155, 0x9b, 0x7fff}, 0x6}, {{&(0x7f0000001800)=@xdp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000001980)=""/45, 0x2d}, {&(0x7f00000019c0)=""/127, 0x7f}, {&(0x7f0000001a40)=""/4, 0x4}], 0x4, &(0x7f0000001ac0)=""/6, 0x6, 0xffffffffffffe14f}, 0x5}, {{&(0x7f0000001b00)=@pppol2tpv3in6, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/84, 0x54}], 0x2, &(0x7f0000001d00)=""/20, 0x14, 0x8}, 0xfffffffffffffff7}], 0x7, 0x2000, &(0x7f0000001f00)) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001f80)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000c0}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x30, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048080) 08:41:59 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x300]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:41:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 452.292457] RAX: ffffffffffffffda RBX: 00007f73ea337c90 RCX: 0000000000457569 [ 452.299752] RDX: 000000002000c000 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 452.307060] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.314340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73ea3386d4 [ 452.321623] R13: 00000000004c8d90 R14: 00000000004d1b08 R15: 0000000000000004 [ 452.375947] binder: 18401:18406 ERROR: BC_REGISTER_LOOPER called without request [ 452.440832] binder: 18401:18415 got reply transaction with no transaction stack [ 452.481613] binder: 18401:18415 transaction failed 29201/-71, size 32-0 line 2741 08:42:00 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0189436, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x500]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 08:42:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x401, 0x10000) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={r2, 0x1}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000100)) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x1000, 0x4, 0x7, 0x8000, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x4, 0xae95, 0x8000, 0x6, 0x9, 0x100, 0x8, 0x6, r3}, &(0x7f0000000240)=0x20) 08:42:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], 0x0}}}], 0x0, 0x0, 0x0}) 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5450, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 452.625354] binder_thread_release: 9 callbacks suppressed [ 452.625366] binder: release 18401:18406 transaction 225 out, still active [ 452.640677] binder_release_work: 7 callbacks suppressed [ 452.640682] binder: undelivered TRANSACTION_COMPLETE [ 452.649723] binder: release 18401:18406 transaction 225 in, still active [ 452.668463] binder: send failed reply for transaction 225, target dead 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x9]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 08:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 452.760646] binder: 18434:18440 ERROR: BC_REGISTER_LOOPER called without request 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5451, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], &(0x7f0000000240)}}}], 0x0, 0x0, 0x0}) 08:42:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300"], 0x1}}, 0x0) 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 452.877722] binder: undelivered TRANSACTION_COMPLETE [ 452.883217] binder: undelivered transaction 229, process died. [ 452.903304] binder: undelivered TRANSACTION_COMPLETE 08:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x4020940d, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x4020940d, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.017551] binder: 18455:18461 ERROR: BC_REGISTER_LOOPER called without request 08:42:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@local, @remote}, 0x8) close(r0) 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88640000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300"], 0x1}}, 0x0) [ 453.112489] binder: undelivered TRANSACTION_COMPLETE [ 453.117704] binder: undelivered transaction 232, process died. 08:42:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], &(0x7f0000000240)}}}], 0x0, 0x0, 0x0}) 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85512, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.159979] binder: undelivered TRANSACTION_COMPLETE 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3e8]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc00455d0, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.267999] binder: 18477:18484 ERROR: BC_REGISTER_LOOPER called without request 08:42:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc00455d0, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x900) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x80000000, 0x6, '9P2000'}, 0x13) 08:42:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300"], 0x1}}, 0x0) [ 453.366536] binder: undelivered TRANSACTION_COMPLETE [ 453.371777] binder: undelivered transaction 235, process died. 08:42:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda], &(0x7f0000000240)}}}], 0x0, 0x0, 0x0}) [ 453.410554] binder: undelivered TRANSACTION_COMPLETE 08:42:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x402, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x4}, 0x2) close(r0) 08:42:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.484940] binder: 18499:18503 ERROR: BC_REGISTER_LOOPER called without request 08:42:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5451, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000"], 0x1}}, 0x0) 08:42:01 executing program 1 (fault-call:7 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 453.597936] binder: undelivered TRANSACTION_COMPLETE [ 453.614713] binder: undelivered transaction 238, process died. 08:42:01 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88caffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 453.649355] binder: undelivered TRANSACTION_COMPLETE 08:42:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000"], 0x1}}, 0x0) 08:42:01 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x401000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045516, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.755950] binder: 18522:18527 ERROR: BC_REGISTER_LOOPER called without request [ 453.778065] FAULT_INJECTION: forcing a failure. [ 453.778065] name failslab, interval 1, probability 0, space 0, times 0 [ 453.840107] CPU: 0 PID: 18527 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 453.848713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.858077] Call Trace: [ 453.860685] dump_stack+0x244/0x39d [ 453.864370] ? dump_stack_print_info.cold.1+0x20/0x20 [ 453.869602] ? debug_smp_processor_id+0x1c/0x20 [ 453.874288] ? perf_trace_lock+0x14d/0x7a0 [ 453.878550] should_fail.cold.4+0xa/0x17 [ 453.882633] ? fault_create_debugfs_attr+0x1f0/0x1f0 08:42:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000"], 0x1}}, 0x0) 08:42:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 453.887752] ? lock_is_held_type+0x210/0x210 [ 453.892186] ? graph_lock+0x270/0x270 [ 453.896002] ? graph_lock+0x270/0x270 [ 453.899828] ? check_preemption_disabled+0x48/0x280 [ 453.904857] ? mark_held_locks+0x130/0x130 [ 453.909115] ? find_held_lock+0x36/0x1c0 [ 453.913217] ? perf_trace_sched_process_exec+0x860/0x860 [ 453.918689] ? kasan_check_write+0x14/0x20 [ 453.922948] __should_failslab+0x124/0x180 [ 453.927204] should_failslab+0x9/0x14 [ 453.931029] kmem_cache_alloc_trace+0x2d7/0x750 [ 453.935721] ? _raw_spin_unlock+0x2c/0x50 [ 453.939889] binder_transaction+0xadf/0x7170 [ 453.944333] ? __lock_acquire+0x62f/0x4c20 [ 453.944353] ? print_usage_bug+0xc0/0xc0 [ 453.944374] ? print_usage_bug+0xc0/0xc0 [ 453.944420] ? binder_translate_handle.isra.39+0xdd0/0xdd0 [ 453.952724] ? __lock_acquire+0x62f/0x4c20 [ 453.952754] ? mark_held_locks+0x130/0x130 [ 453.952777] ? mark_held_locks+0x130/0x130 [ 453.952815] ? __lock_acquire+0x62f/0x4c20 [ 453.952836] ? check_preemption_disabled+0x48/0x280 [ 453.984473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.990026] ? check_preemption_disabled+0x48/0x280 [ 453.995061] ? perf_trace_lock+0x14d/0x7a0 [ 453.999312] ? debug_smp_processor_id+0x1c/0x20 [ 454.003992] ? perf_trace_lock+0x14d/0x7a0 [ 454.008252] ? lock_is_held_type+0x210/0x210 [ 454.012682] ? lock_is_held_type+0x210/0x210 [ 454.017115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.022669] ? graph_lock+0x270/0x270 [ 454.026483] ? debug_smp_processor_id+0x1c/0x20 [ 454.031164] ? graph_lock+0x270/0x270 [ 454.034985] ? print_usage_bug+0xc0/0xc0 [ 454.039068] ? find_held_lock+0x36/0x1c0 [ 454.043157] ? __might_fault+0x12b/0x1e0 [ 454.047246] ? lock_downgrade+0x900/0x900 [ 454.051427] ? lock_release+0xa10/0xa10 [ 454.055435] ? perf_trace_sched_process_exec+0x860/0x860 [ 454.060915] ? check_preemption_disabled+0x48/0x280 [ 454.065968] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.071533] ? _copy_from_user+0xdf/0x150 [ 454.075700] binder_thread_write+0xa1f/0x2b50 [ 454.080214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.085773] ? trace_event_raw_event_binder_update_page_range+0x3a0/0x3a0 [ 454.085812] ? lock_is_held_type+0x210/0x210 [ 454.085836] ? print_usage_bug+0xc0/0xc0 [ 454.085857] ? graph_lock+0x270/0x270 [ 454.085877] ? check_preemption_disabled+0x48/0x280 [ 454.110080] ? debug_smp_processor_id+0x1c/0x20 [ 454.114779] ? find_held_lock+0x36/0x1c0 [ 454.118921] ? __might_fault+0x12b/0x1e0 [ 454.122998] ? lock_downgrade+0x900/0x900 [ 454.127174] ? lock_release+0xa10/0xa10 [ 454.131162] ? perf_trace_sched_process_exec+0x860/0x860 [ 454.136641] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.142183] ? _copy_from_user+0xdf/0x150 [ 454.146352] binder_ioctl_write_read.isra.42+0x306/0xb90 [ 454.151801] ? kasan_check_read+0x11/0x20 [ 454.155970] ? binder_thread_write+0x2b50/0x2b50 [ 454.160738] ? _raw_spin_unlock+0x2c/0x50 [ 454.164881] ? _binder_inner_proc_unlock+0x3f/0x80 [ 454.169811] ? binder_get_thread+0x1b6/0x880 [ 454.174211] ? binder_new_node+0x8d0/0x8d0 [ 454.178452] ? perf_trace_sched_process_exec+0x860/0x860 [ 454.183907] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 454.189436] ? rcu_pm_notify+0xc0/0xc0 [ 454.193324] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 454.198936] binder_ioctl+0xab0/0x1940 [ 454.202827] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 454.208446] ? find_held_lock+0x36/0x1c0 [ 454.212500] ? __fget+0x4aa/0x740 [ 454.215943] ? lock_downgrade+0x900/0x900 [ 454.220080] ? check_preemption_disabled+0x48/0x280 [ 454.225087] ? kasan_check_read+0x11/0x20 [ 454.229220] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 454.234486] ? rcu_read_unlock_special+0x370/0x370 [ 454.239407] ? __fget+0x4d1/0x740 [ 454.242852] ? ksys_dup3+0x680/0x680 [ 454.246559] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 454.251483] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 454.257096] do_vfs_ioctl+0x1de/0x1790 [ 454.260974] ? ioctl_preallocate+0x300/0x300 [ 454.265370] ? __fget_light+0x2e9/0x430 [ 454.269334] ? fget_raw+0x20/0x20 [ 454.272779] ? __sb_end_write+0xd9/0x110 [ 454.276847] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.282377] ? fput+0x130/0x1a0 [ 454.285648] ? do_syscall_64+0x9a/0x820 [ 454.289612] ? do_syscall_64+0x9a/0x820 [ 454.293579] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 454.298156] ? security_file_ioctl+0x94/0xc0 [ 454.302558] ksys_ioctl+0xa9/0xd0 [ 454.306003] __x64_sys_ioctl+0x73/0xb0 [ 454.309882] do_syscall_64+0x1b9/0x820 [ 454.313762] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.319120] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.324046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.328884] ? trace_hardirqs_on_caller+0x310/0x310 [ 454.333895] ? prepare_exit_to_usermode+0x291/0x3b0 [ 454.338947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.343791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.349002] RIP: 0033:0x457569 [ 454.352202] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.371119] RSP: 002b:00007f4f869bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.378847] RAX: ffffffffffffffda RBX: 00007f4f869bfc90 RCX: 0000000000457569 [ 454.386122] RDX: 00000000200002c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 454.393397] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 454.400667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f869c06d4 [ 454.407947] R13: 00000000004be918 R14: 00000000004ced18 R15: 0000000000000005 [ 454.417461] binder: 18522:18527 transaction failed 29201/-12, size 32-8 line 2913 [ 454.425685] binder: send failed reply for transaction 240 to 18522:18527 [ 454.460495] binder: undelivered TRANSACTION_COMPLETE [ 454.465671] binder_release_work: 7 callbacks suppressed [ 454.465678] binder: undelivered TRANSACTION_ERROR: 29201 [ 454.477286] binder: undelivered TRANSACTION_ERROR: 29190 08:42:02 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300000000000000000000000000000000"], 0x1}}, 0x0) 08:42:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0189436, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x81785501, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4888]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:02 executing program 1 (fault-call:7 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 455.024769] FAULT_INJECTION: forcing a failure. [ 455.024769] name failslab, interval 1, probability 0, space 0, times 0 [ 455.055834] CPU: 1 PID: 18554 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 455.064472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.073843] Call Trace: [ 455.076461] dump_stack+0x244/0x39d [ 455.080118] ? dump_stack_print_info.cold.1+0x20/0x20 [ 455.085337] ? debug_smp_processor_id+0x1c/0x20 [ 455.090020] ? perf_trace_lock+0x14d/0x7a0 [ 455.094273] should_fail.cold.4+0xa/0x17 [ 455.094293] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.094327] ? save_stack+0x43/0xd0 [ 455.094342] ? kasan_kmalloc+0xc7/0xe0 [ 455.094362] ? kmem_cache_alloc_trace+0x152/0x750 [ 455.111022] ? binder_transaction+0xadf/0x7170 [ 455.111037] ? binder_thread_write+0xa1f/0x2b50 [ 455.111051] ? binder_ioctl_write_read.isra.42+0x306/0xb90 [ 455.111067] ? do_vfs_ioctl+0x1de/0x1790 [ 455.111079] ? ksys_ioctl+0xa9/0xd0 [ 455.111097] ? do_syscall_64+0x1b9/0x820 [ 455.111120] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.138500] ? mark_held_locks+0x130/0x130 [ 455.138524] ? find_held_lock+0x36/0x1c0 [ 455.138573] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.161742] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 455.167329] __should_failslab+0x124/0x180 [ 455.171592] should_failslab+0x9/0x14 08:42:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5421, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300000000000000000000000000000000"], 0x1}}, 0x0) [ 455.175411] kmem_cache_alloc_trace+0x2d7/0x750 [ 455.180092] ? __lockdep_init_map+0x105/0x590 [ 455.184615] binder_transaction+0xbe3/0x7170 [ 455.189040] ? __lock_acquire+0x62f/0x4c20 [ 455.193293] ? print_usage_bug+0xc0/0xc0 [ 455.197377] ? print_usage_bug+0xc0/0xc0 [ 455.201475] ? binder_translate_handle.isra.39+0xdd0/0xdd0 [ 455.207128] ? __lock_acquire+0x62f/0x4c20 [ 455.211391] ? mark_held_locks+0x130/0x130 [ 455.215646] ? mark_held_locks+0x130/0x130 [ 455.219906] ? __lock_acquire+0x62f/0x4c20 [ 455.224157] ? check_preemption_disabled+0x48/0x280 [ 455.229196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.234750] ? check_preemption_disabled+0x48/0x280 [ 455.239776] ? perf_trace_lock+0x14d/0x7a0 [ 455.244035] ? debug_smp_processor_id+0x1c/0x20 [ 455.248723] ? perf_trace_lock+0x14d/0x7a0 [ 455.252980] ? lock_is_held_type+0x210/0x210 [ 455.257406] ? lock_is_held_type+0x210/0x210 [ 455.261843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.267400] ? graph_lock+0x270/0x270 [ 455.271217] ? debug_smp_processor_id+0x1c/0x20 08:42:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045878, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2f]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 455.275899] ? graph_lock+0x270/0x270 [ 455.279727] ? print_usage_bug+0xc0/0xc0 [ 455.283822] ? find_held_lock+0x36/0x1c0 [ 455.287915] ? __might_fault+0x12b/0x1e0 [ 455.291993] ? lock_downgrade+0x900/0x900 [ 455.296164] ? lock_release+0xa10/0xa10 [ 455.300152] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.305621] ? check_preemption_disabled+0x48/0x280 [ 455.310675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.316227] ? _copy_from_user+0xdf/0x150 [ 455.320396] binder_thread_write+0xa1f/0x2b50 [ 455.324907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.330469] ? trace_event_raw_event_binder_update_page_range+0x3a0/0x3a0 [ 455.337429] ? lock_is_held_type+0x210/0x210 [ 455.341859] ? print_usage_bug+0xc0/0xc0 [ 455.345939] ? graph_lock+0x270/0x270 [ 455.349751] ? check_preemption_disabled+0x48/0x280 [ 455.354788] ? debug_smp_processor_id+0x1c/0x20 [ 455.359498] ? find_held_lock+0x36/0x1c0 [ 455.363583] ? __might_fault+0x12b/0x1e0 [ 455.367657] ? lock_downgrade+0x900/0x900 [ 455.371832] ? lock_release+0xa10/0xa10 [ 455.375828] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.381329] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.386883] ? _copy_from_user+0xdf/0x150 [ 455.391058] binder_ioctl_write_read.isra.42+0x306/0xb90 [ 455.396903] ? kasan_check_read+0x11/0x20 [ 455.401070] ? binder_thread_write+0x2b50/0x2b50 [ 455.405853] ? _raw_spin_unlock+0x2c/0x50 [ 455.410015] ? _binder_inner_proc_unlock+0x3f/0x80 [ 455.414954] ? binder_get_thread+0x1b6/0x880 [ 455.414973] ? binder_new_node+0x8d0/0x8d0 [ 455.414995] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.423640] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 455.423660] ? rcu_pm_notify+0xc0/0xc0 [ 455.423689] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 455.423710] binder_ioctl+0xab0/0x1940 [ 455.448068] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 455.453716] ? find_held_lock+0x36/0x1c0 [ 455.457814] ? __fget+0x4aa/0x740 [ 455.461285] ? lock_downgrade+0x900/0x900 [ 455.465454] ? check_preemption_disabled+0x48/0x280 [ 455.470505] ? kasan_check_read+0x11/0x20 [ 455.474665] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 455.479951] ? rcu_read_unlock_special+0x370/0x370 [ 455.484911] ? __fget+0x4d1/0x740 [ 455.488387] ? ksys_dup3+0x680/0x680 [ 455.492124] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 455.497073] ? binder_ioctl_write_read.isra.42+0xb90/0xb90 [ 455.502716] do_vfs_ioctl+0x1de/0x1790 [ 455.506626] ? ioctl_preallocate+0x300/0x300 [ 455.511058] ? __fget_light+0x2e9/0x430 [ 455.515056] ? fget_raw+0x20/0x20 [ 455.518531] ? __sb_end_write+0xd9/0x110 08:42:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x25d1, 0x444102) close(r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8400, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4}, 0x10) 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105518, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5460, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300000000000000000000000000000000000000"], 0x1}}, 0x0) 08:42:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2f000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 455.522621] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 455.528175] ? fput+0x130/0x1a0 [ 455.531477] ? do_syscall_64+0x9a/0x820 [ 455.531495] ? do_syscall_64+0x9a/0x820 [ 455.531514] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 455.531543] ? security_file_ioctl+0x94/0xc0 [ 455.531570] ksys_ioctl+0xa9/0xd0 [ 455.531592] __x64_sys_ioctl+0x73/0xb0 [ 455.555842] do_syscall_64+0x1b9/0x820 [ 455.559745] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.559767] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.559787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.574924] ? trace_hardirqs_on_caller+0x310/0x310 [ 455.579957] ? prepare_exit_to_usermode+0x291/0x3b0 [ 455.584998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.589872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.595073] RIP: 0033:0x457569 [ 455.598281] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.617197] RSP: 002b:00007f4f869bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.624925] RAX: ffffffffffffffda RBX: 00007f4f869bfc90 RCX: 0000000000457569 [ 455.632210] RDX: 00000000200002c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 455.639498] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 455.646782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f869c06d4 [ 455.654077] R13: 00000000004be918 R14: 00000000004ced18 R15: 0000000000000005 [ 455.670677] binder: 18551:18554 transaction failed 29201/-12, size 32-8 line 2924 [ 455.694243] binder: send failed reply for transaction 243 to 18551:18554 08:42:03 executing program 1 (fault-call:7 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) fcntl$getflags(r0, 0x408) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x7, 0x2, 0x4, 0x9}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x8, 0x20}, &(0x7f0000000140)=0xc) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x20, 0x16, 0x1a, 0x4, 0x7f, 0x5, 0x12f}) close(r0) 08:42:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0405519, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300000000000000000000000000000000000000"], 0x1}}, 0x0) 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5460, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 455.816040] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.822149] binder: undelivered TRANSACTION_ERROR: 29190 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551a, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x80045500, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8200, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6d) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x313, 0x0, 0x7, 0x2000000000, 0x4, @remote}, 0x10) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0) getdents64(r1, &(0x7f00000000c0)=""/81, 0x51) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x20, 0x0, 0x8}, 0x4}}, 0x18) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x204, 0x0, 0x1f, 0x7bd7, 0x887, @broadcast}, 0x10) 08:42:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x104]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee29300000000000000000000000000000000000000"], 0x1}}, 0x0) [ 455.952259] binder_thread_write: 1 callbacks suppressed [ 455.952269] binder: 18602:18609 ERROR: BC_REGISTER_LOOPER called without request [ 456.027417] binder: 18602:18618 got reply transaction with no transaction stack [ 456.060520] binder: 18602:18618 transaction failed 29201/-71, size 32-8 line 2741 08:42:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551b, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40049409, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x6400000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000000000000000000032"], 0x1}}, 0x0) [ 456.155354] binder: release 18602:18609 transaction 246 out, still active [ 456.171671] binder: release 18602:18609 transaction 246 in, still active [ 456.190476] binder: send failed reply for transaction 246, target dead [ 456.197190] binder: undelivered TRANSACTION_ERROR: 29201 08:42:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x32, 0x6, 0x0, 0x6, 0x10000, 0xfffffffffffffdf8, 0x200, 0x885}, 0x0) 08:42:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8000a0]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045516, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 456.308564] binder: 18634:18640 ERROR: BC_REGISTER_LOOPER called without request 08:42:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000000000000000000032"], 0x1}}, 0x0) 08:42:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8802, 0x0) close(r0) [ 456.354923] binder: 18634:18646 got reply transaction with no transaction stack [ 456.392610] binder: 18634:18646 transaction failed 29201/-71, size 32-8 line 2741 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x80040200]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551a, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 456.486268] binder: release 18634:18640 transaction 249 out, still active [ 456.497345] binder: release 18634:18640 transaction 249 in, still active 08:42:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105517, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee2930000000000000000000000000000000000000032"], 0x1}}, 0x0) [ 456.565557] binder: send failed reply for transaction 249, target dead [ 456.594692] binder: undelivered TRANSACTION_ERROR: 29201 08:42:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) socketpair(0x3, 0x7, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) 08:42:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc020660b, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf401]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 456.647539] binder: 18665:18670 ERROR: BC_REGISTER_LOOPER called without request 08:42:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc020660b, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 456.726052] binder_alloc: binder_alloc_mmap_handler: 18665 20001000-20004000 already mapped failed -16 [ 456.770816] binder: BINDER_SET_CONTEXT_MGR already set 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x6400]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 456.810542] binder: 18665:18670 ioctl 40046207 0 returned -16 [ 456.823502] binder_alloc: 18665: binder_alloc_buf, no vma 08:42:04 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x2, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 456.851971] binder: 18665:18690 ERROR: BC_REGISTER_LOOPER called without request [ 456.877297] binder: release 18665:18670 transaction 252 out, still active [ 456.877548] binder: 18665:18674 transaction failed 29189/-3, size 0-0 line 2973 [ 456.891204] binder: release 18665:18670 transaction 252 in, still active 08:42:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85512, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 456.916954] binder: send failed reply for transaction 252, target dead 08:42:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = socket(0xf, 0x807, 0x80000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@rand_addr=0xffffffffffffffc0, @in=@remote, 0x4e24, 0x0, 0x4e22, 0x7, 0xa, 0x20, 0x20, 0x691b983a5b7def98, 0x0, r2}, {0x81, 0x0, 0x7, 0x100000000, 0x5, 0x7, 0x8f5a, 0x7}, {0x7a4f, 0x27ab55e, 0xca, 0x5}, 0x9e3, 0x6e6bb4, 0x1, 0x1, 0x2}, {{@in=@local, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3502, 0x3, 0x2, 0x3ff, 0x1, 0x8000, 0x7fff}}, 0xe8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x404101, 0x0) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0xfffffffffffffffb, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r3, r4, 0x0, 0x2}, 0x10) 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2b00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551b, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.013116] binder: undelivered TRANSACTION_ERROR: 29189 08:42:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 457.112394] binder: 18705:18712 ERROR: BC_REGISTER_LOOPER called without request [ 457.142122] binder_alloc: binder_alloc_mmap_handler: 18705 20001000-20004000 already mapped failed -16 08:42:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = dup3(r0, r0, 0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0x7, 0x3}, 0x14) 08:42:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x81000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045878, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.171944] binder: BINDER_SET_CONTEXT_MGR already set [ 457.182610] binder: 18705:18712 ioctl 40046207 0 returned -16 [ 457.194823] binder_alloc: 18705: binder_alloc_buf, no vma [ 457.195384] binder: 18705:18720 ERROR: BC_REGISTER_LOOPER called without request [ 457.203762] binder: 18705:18717 transaction failed 29189/-3, size 0-0 line 2973 08:42:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045878, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.290075] binder: release 18705:18712 transaction 255 out, still active [ 457.311673] binder: release 18705:18712 transaction 255 in, still active 08:42:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x29000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.350666] binder: send failed reply for transaction 255, target dead [ 457.372682] binder: undelivered TRANSACTION_ERROR: 29189 08:42:04 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x60000008}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x40000) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000040)=""/87) r5 = syz_init_net_socket$llc(0x1a, 0xfffffffffffffffe, 0x0) bind$llc(r5, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r5) 08:42:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x20000150}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:05 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xc000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 457.523004] binder: 18739:18747 ERROR: BC_REGISTER_LOOPER called without request [ 457.550689] binder_alloc: binder_alloc_mmap_handler: 18739 20001000-20004000 already mapped failed -16 08:42:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 457.578918] binder: BINDER_SET_CONTEXT_MGR already set 08:42:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105511, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.620734] binder: 18739:18747 ioctl 40046207 0 returned -16 [ 457.640608] binder_alloc: 18739: binder_alloc_buf, no vma [ 457.641237] binder: 18739:18760 ERROR: BC_REGISTER_LOOPER called without request 08:42:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xb, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 457.676126] binder: 18739:18759 transaction failed 29189/-3, size 0-0 line 2973 [ 457.693423] binder: release 18739:18747 transaction 258 out, still active [ 457.710791] binder_release_work: 5 callbacks suppressed [ 457.710810] binder: undelivered TRANSACTION_COMPLETE 08:42:05 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8100]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 457.763826] binder: release 18739:18747 transaction 258 in, still active 08:42:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x800455d1, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.804230] binder: send failed reply for transaction 258, target dead [ 457.835922] binder: undelivered TRANSACTION_ERROR: 29189 08:42:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 457.906171] binder: 18775:18778 ERROR: BC_REGISTER_LOOPER called without request [ 457.968407] binder_alloc: binder_alloc_mmap_handler: 18775 20001000-20004000 already mapped failed -16 [ 458.020497] binder: BINDER_SET_CONTEXT_MGR already set [ 458.021885] binder: 18775:18787 ERROR: BC_REGISTER_LOOPER called without request [ 458.025884] binder: 18775:18778 ioctl 40046207 0 returned -16 [ 458.060713] binder_alloc: 18775: binder_alloc_buf, no vma [ 458.066325] binder: 18775:18784 transaction failed 29189/-3, size 0-0 line 2973 [ 458.117864] binder: release 18775:18778 transaction 261 out, still active [ 458.129342] binder: undelivered TRANSACTION_COMPLETE [ 458.140203] binder: release 18775:18778 transaction 261 in, still active [ 458.155283] binder: send failed reply for transaction 261, target dead [ 458.175693] binder: undelivered TRANSACTION_ERROR: 29189 08:42:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x111000, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000000080002, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x86, 0x800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) 08:42:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:05 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffff8d]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xa, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105517, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:05 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe803000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5452, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 458.313346] binder_alloc: binder_alloc_mmap_handler: 18791 20001000-20004000 already mapped failed -16 [ 458.349651] binder: BINDER_SET_CONTEXT_MGR already set 08:42:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xc, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 458.372693] binder: 18791:18801 ioctl 40046207 0 returned -16 [ 458.399973] binder: release 18791:18801 transaction 264 out, still active [ 458.410446] binder: undelivered TRANSACTION_COMPLETE [ 458.415751] binder: release 18791:18801 transaction 264 in, still active 08:42:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x401, 0x4) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 458.464158] binder: send failed reply for transaction 264, target dead 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x2, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ifb0\x00') close(r0) 08:42:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xe, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 458.704509] binder_alloc: binder_alloc_mmap_handler: 18824 20001000-20004000 already mapped failed -16 08:42:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105518, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 458.754486] binder: BINDER_SET_CONTEXT_MGR already set 08:42:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xffd, @loopback, 0x3f}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x100000001, 0x6, 0x20, 0x0, 0x0, 0x0, 0x30040, 0x0, 0x9, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x8, 0x0, 0x3f, 0x6, 0x0, 0x0, 0x80000000, 0x0, 0x7fff, 0x6, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10, r0, 0x0) syz_emit_ethernet(0x3d8, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x3a2, 0x2b, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731"}}}}}}, &(0x7f0000001780)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r3) 08:42:06 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x700]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 458.782508] binder: 18824:18828 ioctl 40046207 0 returned -16 08:42:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x2, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 458.849954] binder_alloc: 18824: binder_alloc_buf, no vma [ 458.851043] binder: release 18824:18828 transaction 266 out, still active [ 458.863141] binder: 18824:18828 transaction failed 29189/-3, size 0-0 line 2973 [ 458.891191] binder: undelivered TRANSACTION_COMPLETE [ 458.914817] binder: release 18824:18828 transaction 266 in, still active [ 458.944148] binder: send failed reply for transaction 266, target dead 08:42:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:06 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1100]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x81785501, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x3, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 459.099293] binder_alloc: binder_alloc_mmap_handler: 18860 20001000-20004000 already mapped failed -16 [ 459.143300] binder: BINDER_SET_CONTEXT_MGR already set 08:42:06 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1a0ffffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 459.170762] binder: 18860:18866 ioctl 40046207 0 returned -16 [ 459.196747] binder: release 18860:18866 transaction 269 out, still active 08:42:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) 08:42:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40049409, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 459.216597] binder: undelivered TRANSACTION_COMPLETE 08:42:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x5, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc030620a, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 459.270590] binder: release 18860:18866 transaction 269 in, still active [ 459.277483] binder: send failed reply for transaction 269, target dead 08:42:06 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8004020000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 459.392883] binder: 18887:18891 ioctl c030620a 200002c0 returned -22 08:42:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x5450, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x8, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 459.453331] binder_alloc: binder_alloc_mmap_handler: 18887 20001000-20004000 already mapped failed -16 08:42:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 459.541423] binder_alloc: 18887: binder_alloc_buf, no vma [ 459.547073] binder: 18887:18898 transaction failed 29189/-3, size 0-0 line 2973 [ 459.549021] binder: BINDER_SET_CONTEXT_MGR already set 08:42:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x7, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3f000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xe, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r2, 0x84, 0x12, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 459.641624] binder: 18887:18891 ioctl 40046207 0 returned -16 [ 459.641718] binder: undelivered TRANSACTION_COMPLETE [ 459.669001] binder: send failed reply for transaction 271, target dead 08:42:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x86ddffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x9effffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 459.778868] binder_release_work: 1 callbacks suppressed [ 459.778877] binder: undelivered TRANSACTION_ERROR: 29189 08:42:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x4, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xa, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) socketpair(0x8, 0x80004, 0x1000, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000600)={0xb79d, 0x8, 0x4, 0x1, 0x7, 0x0, 0x1, 0xbe17, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x5, 0x8}, &(0x7f00000006c0)=0x8) sendmsg$inet_sctp(r2, &(0x7f00000007c0)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x450b, @mcast2, 0x80000000}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="4c2d6f9df6976fabcfb8", 0xa}, {&(0x7f0000000380)="c537b2f72f20683642168c3cce76e5c6032958979baa0d8ce7d4ac1a653469ed95c773aca7d2ec0ce124891a99924f7e86ecdcdc123120d6c2e0cb9b1e25f0d01e9022d41a19bf0487ddfdc6d22b078b2974d4f9cf7ddf1f9eb29459116d741fcba7ed7d50ec5cf7aeb447d9fc0868f5674948c4457b8fbf74e91a71df838c59fc96fddc27c6a703b5b34761a8cd2846880b4f757535ce16e15efcd00d20b21021df18833757ba6cf1fc52ef284fb497bb8fbf32ff7d148234810a5586b086c8d5f2ddee1e576900a070a10f998c9092a187924ed79847368cbe53ddabe936d14d1c5deadd1a81fd93eb", 0xea}, {&(0x7f0000000480)="df241745d493fde9a3b37a76a1692b92c3d5394bf4f7eefd04a9e94cfeff76c3597b9bb147a87bfd664ae9ee266da9a206716016baef3ecda87f68a4e1365211a9165b7d2f9b7b8136", 0x49}, {&(0x7f0000000500)="4595f43b59a4c90762c55d9aa91050f8bc004b3cb08e4d7b9166c843be4fec1a4bb76ffe4d4e71bc2dca95dd3630ff987042cec9dff77540e761626e29e44c158d06d62ec6bd00ac15b54c90063cea85d1f8aaccedf1a77f9bc6083ba7b2bca22f23dbb291854a9a60ef5cf13db950737ae61480a9a4ab6f4f1fa44b18b04c1bd4411bd772898397ac0e6b3d709d8385894090ff22759c578d2c05d110b7be899df66d8795f616d8891dc1b2d229516211114d83db9b7b335caa447aa7eb0fd7ac2165b8b9", 0xc5}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000006732b2d93a2577e00700000000000000080000000000000084000000050000001000000008000000300000000000000084000000010000000000ff07070000000100000008000000090000000300000000800000", @ANYRES32=r3, @ANYBLOB="18000000000000008400000006000000000000000000000030000000000000008400000001000000feff000004800000ff00000006000000000001000600000003000000", @ANYRES32=r4], 0xa8, 0x1}, 0x20044044) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast1}], 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x40081, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) accept4$unix(r6, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x11) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x28000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 459.908158] binder_alloc: binder_alloc_mmap_handler: 18930 20001000-20004000 already mapped failed -16 [ 459.984619] binder: BINDER_SET_CONTEXT_MGR already set [ 459.989968] binder: 18930:18934 ioctl 40046207 0 returned -16 08:42:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x6, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.049493] binder_alloc: 18930: binder_alloc_buf, no vma [ 460.080187] binder: undelivered TRANSACTION_COMPLETE [ 460.086597] binder: 18930:18938 transaction failed 29189/-3, size 0-0 line 2973 08:42:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xb, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.095435] binder: send failed reply for transaction 274, target dead 08:42:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x400200) ioctl$sock_bt(r1, 0xdd17, &(0x7f0000000040)="b0631a87b6cd0f45378e3d5c4dc8c096c3501f2612c8ed030541a41d19a664b57d26782dbd4cabcdfc50c02ecc02d68d551d0ff795bda4b04701abf77720eca6bf1a4f12cd1d4c9a2da986fc3495e3b871502b8d5644290c8954910fbf5366fa0a979d51198d4bbbd830153eafc2fc0b0693e3f90d464ca6b2e68b718e02d5bacb9ca8c65e0b39a19f6ab39f70e7c686510ff442562adadc890537f50ad0f5c845d69dd7796a0a") fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x1) 08:42:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfdfdffff, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.195943] binder: undelivered TRANSACTION_ERROR: 29189 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x20480]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x4, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x7e, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x1000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.366101] binder_alloc: binder_alloc_mmap_handler: 18970 20001000-20004000 already mapped failed -16 [ 460.411470] binder: BINDER_SET_CONTEXT_MGR already set 08:42:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x600000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 460.462777] binder: 18970:18975 ioctl 40046207 0 returned -16 08:42:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x7, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.512939] binder_alloc: 18970: binder_alloc_buf, no vma [ 460.540625] binder: undelivered TRANSACTION_COMPLETE [ 460.546452] binder: 18970:18975 transaction failed 29189/-3, size 0-0 line 2973 08:42:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10080, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x2) close(r0) [ 460.557083] binder: send failed reply for transaction 277, target dead 08:42:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x2000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:08 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x80350000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 460.652825] binder: undelivered TRANSACTION_ERROR: 29189 08:42:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xc, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.781059] binder: BINDER_SET_CONTEXT_MGR already set 08:42:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x2, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:08 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3300]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 460.803710] binder: undelivered TRANSACTION_COMPLETE [ 460.819751] binder: send failed reply for transaction 280, target dead [ 460.827834] binder_alloc: 19006: binder_alloc_buf, no vma 08:42:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 460.850918] binder: 19006:19012 ioctl 40046207 0 returned -16 [ 460.913699] binder: 19006:19014 transaction failed 29189/-3, size 0-0 line 2973 08:42:08 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf5ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) recvfrom$llc(r0, &(0x7f0000000000)=""/211, 0xd3, 0x40, &(0x7f0000000100)={0x1a, 0xffff, 0x6, 0x10001, 0x7fffffff, 0x5, @broadcast}, 0x10) 08:42:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 461.010482] binder: undelivered TRANSACTION_ERROR: 29189 08:42:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfffffdfd, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x5, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x8706000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x200000000000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:08 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 461.198040] binder_thread_write: 14 callbacks suppressed [ 461.198052] binder: 19037:19047 ERROR: BC_REGISTER_LOOPER called without request [ 461.264879] binder: BINDER_SET_CONTEXT_MGR already set [ 461.280587] binder: 19037:19047 ioctl 40046207 0 returned -16 [ 461.298898] binder_alloc: 19037: binder_alloc_buf, no vma [ 461.302165] binder: 19037:19051 ERROR: BC_REGISTER_LOOPER called without request 08:42:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x336, 0x6, 0x80, 0x6, 0x800, @local}, 0x10) close(r0) [ 461.304552] binder: 19037:19047 transaction failed 29189/-3, size 0-0 line 2973 [ 461.322732] binder: undelivered TRANSACTION_COMPLETE [ 461.335697] binder: send failed reply for transaction 283, target dead 08:42:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306253, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 461.362522] binder: undelivered TRANSACTION_ERROR: 29189 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x5000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfdfdffff00000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 461.458420] llc_conn_state_process: llc_conn_service failed [ 461.486658] llc_conn_state_process: llc_conn_service failed [ 461.528731] binder: 19060:19062 ERROR: BC_REGISTER_LOOPER called without request [ 461.578551] binder: 19060:19073 ioctl c0306253 200002c0 returned -22 [ 461.603337] binder: BINDER_SET_CONTEXT_MGR already set [ 461.620048] binder: 19060:19062 ioctl 40046207 0 returned -16 [ 461.639154] binder: 19060:19078 ERROR: BC_REGISTER_LOOPER called without request 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x89ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x6, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x100000000000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f0000000040)="6370757365746b657972696e67a5293a2a00", 0xffffffffffffffff}, 0x30) getpgrp(r1) lseek(r2, 0x0, 0x5) close(r0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 08:42:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 461.686169] binder: undelivered TRANSACTION_ERROR: 29189 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xc]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x2, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 461.819720] binder: 19089:19095 ERROR: BC_REGISTER_LOOPER called without request [ 461.845957] binder: send failed reply for transaction 289 to 19089:19095 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x8, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x800000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 461.877094] binder_alloc_mmap_handler: 3 callbacks suppressed [ 461.877112] binder_alloc: binder_alloc_mmap_handler: 19089 20001000-20004000 already mapped failed -16 [ 461.955480] binder: BINDER_SET_CONTEXT_MGR already set [ 461.965420] binder: 19089:19095 ioctl 40046207 0 returned -16 [ 461.987423] binder: 19089:19099 ERROR: BC_REGISTER_LOOPER called without request [ 461.988089] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 461.988097] binder_alloc: 19089: binder_alloc_buf, no vma [ 462.006984] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.018284] binder_transaction: 1 callbacks suppressed [ 462.018300] binder: 19089:19095 transaction failed 29189/-3, size 0-0 line 2973 08:42:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = semget$private(0x0, 0x3, 0x0) semtimedop(r1, &(0x7f0000000180)=[{0x7, 0x1, 0x1800}], 0x1, &(0x7f00000001c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x20000) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0xab, "8192608b69b32530bdc752a5fa3155c56068c126136f85e8db31ee41c025ba6db760ad3c589b8cfbeece97f6f0c2f9914e8ab4c57e09e57fe948298fe5f060e735a7ad21984c82dcb6dec838a91dc573d5d848d7a7ad501226bd6dbd81a5b67956e1a44241f85790d1fa1a3d4efde2f1a2c9a64bd43fea1a40f1c278aa06e0453fbcdea186ed1f63e0f4ef549115a07529050b9631e825f67ade5fff9d2be4fddd82959596bb47ae4cbe10"}, &(0x7f0000000140)=0xcf) 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xfffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x2, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfffffdfd, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8864000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 462.094244] binder: undelivered TRANSACTION_ERROR: 29189 08:42:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x4000) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000040)=[@register_looper, @increfs_done={0x40106308, r2, 0x1}], 0xf3, 0x0, &(0x7f0000000080)="55fe1de80ba8c5b1893419a280f6d58e933d3e5b70094c0c5e6c199603dbff5387c7a0945616e5fe168e90ea408c6339548a32718f9982ed21ded73c6abe09f32d5d5c118d3adbd92be21e552d9714b11a6481eb4527f5ff8ff2bec5fe2835f35b4ed49c0dc34ada7a4695cde664ed3b7dc4b42f5e5716a0bdd22d60550463899bd5c72509da18abae624b4df488a2177eb006da143d053cd71f17470a3a4cafc0cb6394fbcee709ea5c928809ff87dc306ddf8fb3d6460702c3f706558e54e4389e9c3f07bbcca5aae0f37936f420863948cd70788621d19022a329216ee2405b9010f271dc4ef95b6023b25a17ed3331927d"}) 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0x3, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x100000000000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88a8ffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x200000000000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = socket$inet(0x2, 0x8000b, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x7}, 0x10) close(r0) 08:42:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfdfdffff00000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:09 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffca88]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 462.412335] binder: 19136:19142 ERROR: BC_REGISTER_LOOPER called without request [ 462.443899] binder_alloc: binder_alloc_mmap_handler: 19136 20001000-20004000 already mapped failed -16 08:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x87060000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x200000000000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 462.483245] binder: BINDER_SET_CONTEXT_MGR already set [ 462.542049] binder: 19136:19142 ioctl 40046207 0 returned -16 [ 462.547332] binder: 19136:19157 ERROR: BC_REGISTER_LOOPER called without request 08:42:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x1000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfdfdffff00000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8000a0ffffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x8706}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x2000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa00]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x1000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) recvfrom$llc(r0, &(0x7f0000000080)=""/126, 0x7e, 0x40010100, &(0x7f0000000100)={0x1a, 0x30b, 0x80, 0x7, 0xb48e196, 0x40, @random="a67da266aa5b"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x7, 0x8f5b, 0xfffffffffffffffe, 0x0, @random="d50308fa3111"}, 0xffffffffffffff98) close(r1) 08:42:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x687}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfdfdffff, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 463.089660] binder: 19201:19202 ERROR: BC_REGISTER_LOOPER called without request [ 463.101190] binder: 19201:19202 ioctl c0306225 200002c0 returned -22 [ 463.108871] binder_alloc: binder_alloc_mmap_handler: 19201 20001000-20004000 already mapped failed -16 [ 463.119062] binder: BINDER_SET_CONTEXT_MGR already set [ 463.120635] binder: 19201:19204 ERROR: BC_REGISTER_LOOPER called without request [ 463.124602] binder: 19201:19203 ioctl 40046207 0 returned -16 08:42:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306255, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:10 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x14]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x2000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x18000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 08:42:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x2, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 463.132164] binder_alloc: 19201: binder_alloc_buf, no vma [ 463.138524] binder: 19201:19203 ioctl c0306225 200002c0 returned -22 [ 463.144142] binder: 19201:19202 transaction failed 29189/-3, size 0-0 line 2973 [ 463.150155] binder_thread_release: 15 callbacks suppressed [ 463.150166] binder: release 19201:19202 transaction 294 out, still active [ 463.170174] binder_release_work: 3 callbacks suppressed [ 463.170180] binder: undelivered TRANSACTION_COMPLETE [ 463.181289] binder: release 19201:19202 transaction 294 in, still active 08:42:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0xfffffdfd, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 463.230361] binder_send_failed_reply: 2 callbacks suppressed [ 463.230368] binder: send failed reply for transaction 294, target dead [ 463.267718] binder: undelivered TRANSACTION_ERROR: 29189 08:42:10 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xfeffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfdfdffff, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 463.298741] binder: 19209:19211 ioctl c0306255 200002c0 returned -22 [ 463.329572] binder_alloc: binder_alloc_mmap_handler: 19209 20001000-20004000 already mapped failed -16 08:42:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001d40)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003500)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000003600)=0xe8) sendmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x4, @dev={[], 0x16}, 'teql0\x00'}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)="ad0b47bec937a78536063ce8fd07ec1994b09b8ff8efb2349e71c18295b42047f384b19d7cd1968e9de96e6ca11a69e30853dfb334e7f426161146bec92026faf88eca2875d5bb4dd371b1e0f588630fc41b0faba726f6713a3c9575d04ef8afd8d25bbb1881", 0x66}, {&(0x7f0000000100)="74f72e12b6363fc43a66ad7ce51072babb50375f49d3197e3e7349eb81b875c521e0f972962cd2d0293f41085336f2d67f93748bc18f405fd778805695d784e5f22f87a2ee868c8e12c6bb73f1ed31d83f0f798a8bd18266424d0ae0433df786c6976d625f8894fc144636c73b894212266cc277c95980363d", 0x79}, {&(0x7f0000000380)="85468983c97ebaf9c3c6081913aa13739d8c0b2de4d79c16b4b4d8272be31dbba4ad5ace7615eb1470c6c26fe249b2cec178739538354a0573b9fa4c78a8c65794c773fe59fb106caa84d391e82d1b58ec448afcbdfd8e640769240b9d32d2d52ff54bfb191941f0dace1458acb03c1e71d7a8e73b78e33e7cdfd54fe20ab2517c584e9cb9f64942907adbcc1f3847538f90f773a689ad5da03457ade8d6cbb3821d4a7c0ec5676b2ce406d219796d2c0e720bd1787f54ab67f7c5f637a97137ea9bb4c24d27ad79df4b8dfe0c2caf44cac8b5ae2d9ff88264ee0dc3dc37952c28d87b21bb9af5c4083447d0a554b517a8a6148a8bb18c82b67fabf929df9431e3f1f18e7c77e1a2f65dcd64bbc59ef8c90ea530016ce56454e4f93f21b055f9a2b3d31451df0e88617b5ae72a505ab5084a807805e454ed70240d992d23636a81b1fbb635411b632919e6f805cbdf1385b86d3f5d3ad1a442301af06effa69f4f531dee2e79eb99d2833dd6fb63a94ec26793efc556597c15417b1fa06a7a73c6f70eaf242376ea2b967385eb7202a103b1f7c05d3b8cfe63d86d607ebdb518ea1d2ee1e1122ac8c6833caa8c9c0ab2a7a8335bc3cd8e879226dd959c41ee43e75b457c835875dc0e77bbe006e250982d5bd6f057c3f7fb718f236059c84430e3ba4229a65bb1afb8a4b3482989b47a3d9a923772f2f93f9822b28643ef4037cf1d6c366b852422ae8950d5396ae7e867d6c77022f003a33237bda5dd3b1b34d04ef4975f890fd4eae0730b06dc2346e7d48c1224cb69995ae4e19d3435309df2ffd047107247b475052121e064ea9ef4c4c32123f8b8e5bdaa4f24e930fa65590e3b37be1733956a4a492d9b8173442b5a8101c6ca90a04eabaa69ba181e4efc1d350905b06bc942d8b05e6953393beb398c46e46e28e9a325e2ec2eb2c9976977af50bb6ea73682366a568d9a16a25d751aecde70773131eb8fdadd5e723aa8f2a44d7404bd6956a67f8945d860601b904380f46796f1bbe3c79eeab834cdf17cf78fe7a10588764d5c4399a11bd3c1da2de9b254b952e30f529b1ef53d36978717a1fdda5d26249ef4ccffb11b4ea9daefe4b5bf308b197480877eaaa1d1831c981597cf6ae3efc035cad18c80e6fd86fc2137580b74c2f7a34f429b094b1f63f647ad1a9072cda1b487f2ea4dd944078a5cf99cf4fd3320ff4b007495ce8fe5523f99059aaf428b0e0be98729c473ff3e3da4a37b8879638a6adef07b16f8ff6fd3e1d452f11ca992d5ba14cd26997d953aee599ddbee5071de81ccbebaece7f0c28700d252028a1ee8b80dc54f4fd6b70c8b8d12ea679c27d855343965f67a634966ca0a49b46fc28a3d87ad34a13be26aa4ce81d3abd2c620f3bf4c2657294067a36b52c2882e69b310ed5a377ee93d54cb749f6860e4aedb014eb906f1f0bb0ffcdd1c80d620badf3829a7e4dfcae2da6e8c62ef4c0133910eeef503aaee57733c2b9c3f03d555866ace43cf2d5a0df0d88fcbdc7213208f9216bd63a03fb0a37ce907c318753fcdd9f71546e6b29b6839a65928948027f87732211cf6b03df6e11dbfa38784f638b5e75cfda4575675309ca9cce60030eb4605bbfa1267969ec6b3776668ed6f9047013762ea8411939e4b6dacd5fe46c70bebb1c0266ac5a6ad350d12e1107151426c6ab27eb00814ba40e58ffc52ae0719b2731f5d8b0e7524bf227d35b0cac25ac87964c0777c2913f66b58f45fd97ca35cd5a951d745e71a0f97c4ab5b3030732dfb3860e36f24d6cc54f6e76b1b9765da84c3af2d39f8c273aa219fcb3a3b7517f0167c0cdc9a80730e4d6b65fa973eab6350d7841757df2cf5b896cc8b796a6e4e1194ed6f4bdad31d5823ca73403f9e9c344c24e9f591de174229ce56b930aeea7e3ece2963f7363bebd36b115dc2162dadcdfd53984397cc7dc6884c27aa9281cbf7e694f3b612a9d917070b74e357b9e01a3d6cee459a80988d1cca0278c7ecb8800f89cef6d1273a5e0c3db22c504c56c6e0ccbfad2ebd3b4e8a8538b158c4f5c7b1c6be43a1334133e05b72c6d83af997d1efa11955ef281b0b5d988e4277e71e9cc8b219a0479ce1bf1ba8b2d5de72632f4a5efe66e787018734939171836e26e7123340b8eb86141c3ab1fc31e7e81f51a5f725a91f57800653d3a52b29d39a663ac586d55d12bec6a38f70ae7de691df5542648abcc3bd2ef0381eebdf058cb9eebc2560ffa08b5dec7f38b695a53ad45512b72c95a5878d7e842d99d61a1d8979b56930467826d8a95807eab4dc6ff9dd254013b7110b8d4a4a866afb0d78b0d8c224a587197ffa1a5a15a0962bb94e5ad11e5252acae6d8e75432627e63a272d447d1077f2abadab5c18352a8cf830b206b7fe9540b09dd916a94197320861490665075751bb7683fd6bd374bba605a7a8db0244bac62918105a23d6de51ed46203ec321d5284bf7a39d4a3d894eb53a8f659106b089505062a9ea38c9f675c3e9a96c13bd85484e3f7e4331a9d8eb8ebf684ecbcc96856e7d1e66e36698276560370a391ca92f0d6d86184a875ea8dc5e84a85292c28888fd58ea133d5d0e096939d0e2b12296ab9394f49531dcd1a009cbbd24aafcbb8d5fac33eff589aaf82cdf0b237d10a224e35fb15d854857823b281451e64361131f6ff70031e84c945d984f612276052489f5eabad3919008b7ee1a5e1ee50b7384c964b12a19289a34a53baa767722adcd14df5b730b241cbe239552a1c10267dc0a02b4685b2193a93cf2e968abc1fb9b2dd7ef65305cfa8c9d32851dda089e2e8fed9e6ba13af85dbb84db5cc1d29efc671304f01bbddb8bbbbe5baff1f24e706b8903bd98d88331618dcb64bdc6027cb3f640fea9c234701866a762480b8100984239f95b9faad1609b90feacf1f7355558607b3887c97fb52732542706c79cb0fdff6923275af6fecc443352dd313bd2375c776ca86c08cf2157e43857293c041762bc18ee04e1c2b64338c7366d8a91941c0e462fa11ed6fe63a3836475ca0f8985f7ec831c0810852610ace7f184ceeddd91113e8ff9e855121e51663e4374d5ef468c804c2d18eebbe97cd18aac3a5e09ecfe6f3b51613be03103f5a7da67eafa79fc84d985ee690e79796b5a6fc6bfde24623947d4bdf304f4f5f60c820528e56715081e1e32254c0418f462b4ce251858b9fc0c17b00d308ac95048e2238ffa3f174902599c32b1075c9d4f66a59516fbee4ade3a2ff6cd7b0296ddacbe4a294960f2c99a786fb763d8cb08ecd30cfedfff024885d3a5565628c50252592b37b1697ea80842d7fc5ba01faa65e7ed864e1f5db6c087057dce83a240da260b0053ed30911574e2dedc2c8796a87f36c13ba8a7ae6d308d83dabe36b38bf075fab436ac8fd9280f1a0cd291d1fbe25a10e3a0c9e2a1b06318e99835e5496ee12a3ba01aa7c8c9ca0735b4fcfad2370a06cc182d8a17eb3d99b8a50a3137e029549396f79c1a5d85b9f1d328d9068cc46f43d07ec0029a405052da8d8aca67c6f1c770f796df231e167afa1a7f016dc0fb77f71dc00d39904431108b782c18804f32805431b2525a83a8ac771e5cc27e020563340725efefd37309c47959695afe711d82f41a2d185f783dfe320a83adaf59a55a7f67cdfd8c916b77f997d97278a01af7600409af021829c7c16a655e1c526f440a63c79d86ee4dee8f15eeeaab1e26a28e174d53693a94861ef3d16609aa1622a0a97b1c4426e8ad872eeab8301ddb52780e09c18c30ccb66c09e451f0323cff2b44005b6342139a2e82f8e2c3340afabfe16df5966ac7c971b881cb5997e30c2377e920ae408cde38feea99c61fbb1d0f4cce2f7560ef1294c2cbfc389bc238157219c0283d5649f2e89011bc5cc7ed86d188c051fc39cb1159b745580206fff07f35353d67e1385df4d65c0788f7434bd8fcf57ac0039a37b38b216c4da2bca593ed338c879e54518546bdf7fe8a3dbaf68ffd694cdf64333f19477f61ab6456b10e310c556e498138336814c562c479b18c1902a585ce2bc8bdf2ca329c260e10113a39cc6871a9e4f9609d349c729ea69578a4e38c9c5435ab05e6996905ddbe0e1acf6cd17132dd3efbb06a9cdfbd1918337f1df2f0995a3be8982f1f24d74cb46018b4f5ce08c5351b0359b1e4076d1cfdb60361bdff156f7e31e392c0bb46e6eac3190d07a497c3821e46c775219759c8fddbc72386b835acd56fc6698b3fd952093497a39e8537c6b06e4751113d8234ccfbce2744d542a0f55c25a98e3734a0a9e9321f15803ae280f81daec7b9493c6bf164dc0b95fedd291fb6825b361595ad1fca35d118dddfb503443ed60218a62460af775bde4ab600c87d4a3f5437df5043d96a2f9b060a0fef58414479d025ac0670ed4beef92fdf0ce322d1b342d14b1230fefa43480d254a86cdd8616b95e3e64386cd6c63fb650168a3978e9668ecaea705f6be90a977041b5d200bd66e930d6a037bb68aee5455c41c468a16a5c4ea94ec8873ccb488b2278028e1fbb778417cb6386e23526e739ebc47cf0aa2ec04f2f1d3edff1a9d588620d8089a502557a02cfb76fecd2c3568681e9db39eeee5884e51717165c9b1c23e7894016582d5ea03ac82d628f9ec6e72961299e576df95fca93cb806d4ff57e48afc2cca0b71b3a3d7964c947964044025b1daf87cf7d09cdbf52fc5fde43dc5ce2a668bf69c315ef89d14157b773b5ab1f0c241e37aa9a15febef0713c7b6041bc71588dc8a0febc3e6e05e0c15ee48c17aaf0d8d8e3fcee1224b00b8d7502efbcea8bc914fad68b18565b55bc7062c60c694f81c813b940c14295bfaef3e239a278cffb4cc12db4510060f0a2269720f2e3ce2c30256eb3caf1f9fb3b71a3dcdd3a4184a4ab9bfb4466697e725d93691391c3583e0b2269b32cec1860ae53c63dc47af8578a046267ef3e6b4075d63dfe62369bcf6c9d3093a71ae37c914258137d133bbe1d622a98d5a0995e9d59a8b2cf4191a77a3f3c9e29dda81aad076dfb20f50e9d89d951219bbe9e966c0122b70e7efe41878583b9a196bda41d926d87f79d8d3441a565510a20434c34dc805a87c6fbf8d40d0e42f63c583c3c84d9733248f3cb2a2ed76a28be4633871443c5068bf720ea9246bfec961572ac3b6020bb71afff16a4a63e00074206e59ac65106356db5c847e808e651ab9a006dd2e786db958cbf8967256ca2a23783a7e78d106dc438e3641764b1b15fe6364adebdf53e9e934f0a2d935deffac96daecf10fa4ef2a7b48b403fd538be16df2b297fccfff1cc6677f92fe2d33c2efad7ccbf945345d2d7d9705b6286aead0647d6fb555b77626fa45899328c604fbe55bb098dd951e50cd5e957641e3bbbc6afd7b86e36d5a972edc61ed340b4d1f661845ea55fb54dbc97083123358416f87981bc6c00c47854574ce396745a043aaf8c48c1d68bd5c926cc7c6766cb5f702c55d060dfe44aa91ec52ba585cb1f2355f5f31199a6ed2af4c2a2ea860e4bb1dfb41681b733026b280bbb79243c65c6ae967dd033412cf8e454092a5fd585d3428d6cb9c5af30dbb7c1c95a3e191f4fab8cef1b95134026d5881625ddef2da7c56468d5ae3665279f92857aa272aedac25289aece0772802d1c5253596d7fcc5d5ba99cc363ed8e4fa3a68b3af53e89a52782cf4ec80575b7393bc5a2823011248a357f8fa007009c3a70bc6338c534273acab9818b9cd1236f4a933dc7d1e39b32e54b028e0d71082a4fc0d280894", 0x1000}, {&(0x7f0000000180)="98bc674d0cbdca0e2faebb16325cc9f48d99db74f522efee76f8e85f9fd3667f3f2f7c0310584eae3fe89e0eb5692b3095bfd949947e3c", 0x37}, {&(0x7f00000001c0)="0b558b918df252202875e89d5acff095d907826815126f8102730b67c166e51892c7a4cd486c2858ff8ca97eee1ad5236d849f834268e1b5d7782d26e356e297dac0a6263ad0533b5ce833dd9fac7f5a27a45a4292ecf280f603d7efe3fa0d46c116631eb8a6af4ccdf21077e5f8f1b80252eea4ae30dfb5ecd2e17265b2c599560531a82be61eefa892c35765889f826c4f5ac6c8cbe5e54db779eececa5ee67ea05e808a1aaa333b8837b2800ec220c496f1012d530094814da970ec6bd2a9df72580b2ac2d344dba3298b137ff887", 0xd0}, {&(0x7f0000001380)="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", 0xfa}, {&(0x7f00000002c0)="80dc382ec5c48f0983b38824c67b33a7dbd8304dbfb7edf218308928200c22658772bc0c527ebb33c26812b533326c4a6e36fa38c9eeb4edb073b5334a8b15b3830bd3a73f6e74360cb53a999710bf640d20bbbbbfa5d03e0d877c6ed42ef6bf121455378f3b9a43df", 0x69}], 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="1000000000000053e915a5a1000701004ea1e93b14f99b6d19cb91"], 0x10, 0x44000}, 0x4}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001540)="c8dd8d609307b24793107ad8a4d862515ed66106c768a4d4ef20efdde38e83f0cc11450800fa30748aff2a3535cf4a7ccb8879c1af267193ab08c0f7b91ee1fe41ec410c8cf4e2447d958f328398da742ad232df601593edebf3", 0x5a}, {&(0x7f00000015c0)="6ea3dcfe88397b3af13f08cc7d77e9533c76d65a76654180aa05e729cc90bb3c3a56f14609", 0x25}, {&(0x7f0000001600)="ed1db42efaabf76eb2856314e3b3379b460aedad65fe9ff7359ff918a59d3aaa921f57f27ff2a005e5f34726fdb2f7bcf91a92c4f65331e05f37288bc983363b5ae4a19e1c34f526db16fe6a12b250da35414e198f98aefb086746b3c63da96bc214cc3711926769d6c37dfac8fd924cd15828d28142ae3a621617d2921ee44c3506be02a392fdbb1d89331ed6086b8baaf9c6f9cf1506a164606f663596dcc56b2ea31cf31cd2d7512931f0347d1ce73d761b", 0xb3}, {&(0x7f00000016c0)="8437850c338bf8bd19458144bebb2d2283a8e8b729cdc736b440978ed0ee4ae4dc0447055fb50824b2e5da35c448f0cf616f002945a004152844ed1559", 0x3d}, {&(0x7f0000001700)="a266879bd7f71c99e235253a3984b3010f1af812617d7b1d46e81315d0ac86bc9daba80b045a975c96eee9867ee7dae71300404734b39edbb78acf648e871abccbf92399ba5f9b8b4c86be2af5697de09ee3237561f0cbaa8fe08ad519b33f86b5d15e09dcc2f91b3503625907ca4c3773872c5527fea0b956daf4eb34d85a7619d926e216fcb6fcc0fa5e868c5b3fcbb0e4349bdf068680ce580268504a185615088ec4c9a1920d1421c54391d7b93423275d1f20153673a36342da02d212b32ee72d88b86d8a775ce8e869e07d14a6dc7e0c3bc95bcaa1f6ca22a1104bcc4e4cfdc14280075b28c9bbf2", 0xeb}, {&(0x7f0000001800)="692389b467986435160eec1a8aae25e437ceb2eff2f0f557e60c16227562a05846a42172b003675f71dd4909a7b9e64144abbb2dfcf7534ebe87aa3acb5793663cb83f36861d35d78d77bdac82d772713c2e0d81a41d46bced1916a9c9d8300cff040f0870f9f430c4dd0bf68ba553c2fa391dd93915bc6b6ff85e7dfd3f04135e36f56756c21ebf7631b77c0e4f066dc8eb2ea926266ecc9bda64e8f94cddb3cbfb7cfecc6d0914afaeb9b915f04a82ae70ac0f1c5c27a989bdbb283ca4076d7f0d7df11f8d2fdc53e2e74a63135c216f68302b8fa4d2e752e0df66770f111364", 0xe1}, {&(0x7f0000001900)="abaa8381", 0x4}], 0x7, &(0x7f00000019c0)=[{0x50, 0x118, 0x6, "94240d5c79aeee2bd0e1a3b4dec9096986f4605610c7b373b5b9d8f2f76fc4ee15d7fe99ccf2d457492eca19000aa5031824e029d402f3549891abc496cbdc"}, {0xe0, 0x108, 0x2, "4d66751464c853a4e526c41b8473c742c99b46dd4b18bd863be5d23efc3f5d97e2461f62409d9e0dabeabd4ad2155e03bf22f39ff8a26a97a447f110caa7123131c52a07c4095316eb9b923788b5e17192ceec8acffce19e735a1db61c0c1fa0028c37e054dbec6ff15ad90ca75364334c88d4f87096f49f9887cda49ffb3477e40a5ac8634d53cf857d4df354189d45fe565846f334dedbfbfb5028f789e649a46adda858e3ef5d81b6a273a1a8bad451ace86b897d5343e7c1a7397e2b1721b5cd6c7b2e6fa815da74"}], 0x130, 0x80}, 0x60}, {{&(0x7f0000001d80)=@xdp={0x2c, 0x4, r1, 0x16}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001e00)="4ce85ae746072a5630f38d90fea041a357e838d4665f7a394419141b9b0ba662ee13b0b9eb17066fb37f374f0d3fe951bf33f0acc9253428430f3368bba932aa2dd9b9a17774fe730f625d908c3716c626befd2e0c7d94d3fc809f64998db89182abf2c01d38cc540180268de442e8bcebb2959b840269b67de89c349e1abbc65aaf05f598abd8a694878c1583ef823d4d0591b3202f60b367067c20b0f1d556e737e52c12004f1becdb7fc471011eb451977144969b8dabc888e5f1265d2ce9d64b6f4b8d1368fffa574626c5e01e3e15edd6cd27445e6456e9339c7c0f52fc88645f2becf9dccd83", 0xe9}, {&(0x7f0000001f00)="0eefa4ba08ef3f25270e138f0a6c1a4c0a48bc3de7f7c1e472fade741fc5c3e3fb1e39e7db2140a31511212b61d5f7a6b4dfca16a64b3dd1651124110420c092002a6bc4ed12ddfd20602c6b3706241c75d25b6ec48676b9480f03804100966e4d8de72ee98a719be897d63e11ae6f087a4a82e8dc84c1bd50ff1c8c75671743ab8a9e823894dd24854740915d54961228777a7171cc24276a718c39b35f86108fbbd0d8d37a4f0882cf8c2d8280f67d6f5cfc2a91b239de3cf428d04a5ba615a77d9675521caec9366cc8b3683faa0441bff572ccefdd6f9aeee280dfa6", 0xde}, {&(0x7f0000002000)="76862473bc9414b66abcc1e3e9b4c7dc6853bfe7d0c1287a0fafe8e2a92c1b5e2449d027a08615f858750b3d2b608c533884810210e1d44553ca1e83dc05499da03b2062cf70782b038c048fb6e6d11ae7534757323872ee16eeee5a52a78378464a6b489127fa4b74d18f834e0aa2db40836cd84258495cd2a18e1bfd1c0b81a2f29fbcf34098a5c5bf03550e24b60e687634164472b7a312ee07319f3e6da9bceed9d11459271dcb3961a68982b24e52ed8c96e94ec83c8bb6f31195a4a45211c939a56279ed4d9e99cf49e6c742b9c165feb18c1cc77c80439c8fdf1083b5862322e88ee1455bd0c82450e9", 0xed}, {&(0x7f0000002100)="5f0f182145dccc0203c1ca338fcc8f472a7ce024618a627204a55f697cdb02fba93de1d379b22dbf8e1150486ffe37b75ea6a1c47884e158dac317ee5fc9dd0c347b31070ccc9915487361e6bdf0d28e71edd61873557770d3fe92a769ce2ba7c98a116bd11bfe8b9302865cd5dcacb1382669342e005fb64d7a44d78dee2493ca42d3d0a7bd13f4274254da352c189280fa8c5c186880586f62abfb364a26533ddf", 0xa2}, {&(0x7f00000021c0)="d7b3928339dec918f220d44750525556e788c9c43d4fdc2846f34c74d295250ee6bf3941dc3e82671c82dcba16db9e74e76e2868f6eef935b11977ad808ebf1b1cc1fd501fdad0df5515cfa1f04f892228045e53be554affe88bce376f00a7aa4b3145775d3e8b672c6aca40e148adfe69611342941e1fcaa2f407c19b", 0x7d}, {&(0x7f0000002240)}], 0x6, &(0x7f0000002300)=[{0x70, 0xff, 0xdad, "238134fd4cbc93d03fed6e94b4883754fe56c0d680aa0d729574715aa3a9cd4db6d60305defbdca191c2329183e3b9c5f5e3f0655353de390b4abba22eeefdce00e6d2684854e670109db81405f70e3af5577a6f66365dee04a94d"}, {0x90, 0x0, 0xae16, "3bc17f511701fc9c3decaed3228ee688007fe7c68e5d42aa07f503b61f88c994b0e90c08288ea7848ec9d69eb7b297a184acbe3a97df1a264c0931330ad05f8d8c09f8c26026ee1ef6bd4341c9f712ec164033bc6a4c3d8100b3c286bc5474e9f495637d46d50793fbdacb174c5bf0f4896d9247bc11401500d268fc7fd904c8"}, {0x80, 0x111, 0xffffffffffff253b, "f406d0fa40502636d7936dcf873f8632462c23ca329d77ebfeb541e84b73e1c3a2f5b8d770c63543b2919ea5faf731d417d06abbca132a82d807c6a82f6c6e21095c0d63081b505755f40bb2bd5b150d4564df0fc177812ea6617a989d556f475517baa7bc86bed7af54327d25bdb8"}, {0x110, 0x111, 0x3, "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"}, {0xa8, 0x18d, 0x0, "5c594d43f5b1fbbd6caaffa29fd2d4f7b21054e11bb0d5b1ef409a11ce559f4f6fc9fa986ecaeb9f16f53b2971a13c3dccb82dff5de65a77ea8fcfddf21c23e7de077f9bcc688cf6dfe65639f5b37bb989c0f4344b384189fdf2c81e0322cedeeeebb05c6965ce892fce76e81d923a751db82751225b42ec3dbcc5f9b751e6357883592cf3157a394be775dd53575cc2b162"}, {0xb0, 0x84, 0xffff, "50eec4e0b90f2e6ff17c273194fcf71848bc23064f30919397ad648bbcb8eeb54deba5cd7fed7a640803f3a53f7c9f5956242ae364902379604f42998b690369f9c4384c38887cd99823b9a3f7e02eabeedc188ee2d0f76a6cdb69814b9fe5d394e011b831fe8f104cd5f936218f49f9a615f5a586dc264abc592a29dacc08ffad36dd130368a9d62663920d044de076ad6461c6f0f7a0f9e9"}, {0xd8, 0x109, 0x3, "8a90dc538f647f34a271855eb72bc65e1ff7529aac33a63350f4a52a34a0952a7b7651b61ded76d9531ef0d054c397f2b4f132f3230cb328a02b122d4d23fd4ba2a7a7743c57cd12cd66058234bd96f85de25786697426ce058b11571044dfc937d9bf0f4f2ef840dc81af083695d27f3a6d5674308c9ab40da966a3e7e1e78181d3d422e833e57dc63972f5cf9f22f5c83ff8253dc65e5f8ad072d52ce99016fcd07f325d1a7f1dfe6950a5f1587e95b820bda48ce0c3203792e216c8612f6e545e1a"}, {0xd0, 0x12f, 0xfffffffffffff5e3, "ff29075c5abe2da1ac597dbf22127240e6a22125383df5d2f7a9472fb84893fe088ad440f58318f15c9dcf46bfa5239317f6cc643864189ae11e44b4a10a3e0d52cf543966cbaede89498820ab62ed039569a05132f29478ff2c53a57e5d91028bcfdcb67365ec456fa43261ec4c60fcdec323a864ca9cb36a8af0b679a1048ecfb3415de1ab5922a61b9c9d78f8afbf135f540d243e81c4d2cacda0bd6c24f751d92beb09fb85d2d71483bd2f97d7bc43b9bb682af6c7f8dd"}], 0x590, 0x8000}, 0x9}, {{&(0x7f00000028c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002940)="a4e790ae20b311571c2fab2bd3ec687f9ee6f1b1f7438fca6dcc6d7eabdc1ade1945fc90bdf3cf46d8fa1884c5d63de24f468bd390283bad", 0x38}, {&(0x7f0000002980)="ee962ff580b734222b22c22dcc21242f07cd742cb116b710906e817818041d37ad7af2d775b2311a8be34c0676c8afc555f37fef0efcd2ada95dc0937b1d3bf141aedc3f560d2833b7651edde00453dc9aa9d06a22598d46495f66b8a9e5f50bc9fb634e7b4656f594f24ee7e4ce6709104e6d7abb94ca935cf3b992a401c969b66468f549160f2242e4c7b27f09f9cbda956f0737af628afac8f7e25c933d23141cdba8a14751", 0xa7}, {&(0x7f0000002a40)="32e83e084843258271fd7488a57b9c83c64416d1e5bf350d11b8d2cc8069cb6631949c46e99f3936663474a5fb5bc03aba681f0183d2920cba6eea537308d9e4dcc05604e0c13d1eced1e21e126a39561b5259164ad0446e56ed3ab2cf78e8ed0f463a16dfe1984714c4aea175d9ae0be6e2655e043af869fde3810f3101ef947c3655d135dd6e", 0x87}, {&(0x7f0000002b00)="a20d39eb1ab5eaa96134f65071ae713e11216e12934c7fe6cbb9120de9ea", 0x1e}], 0x4, &(0x7f0000002b80)=[{0x28, 0x107, 0xc382, "2ac87d205d402ccbf00dfe8fede83f17ef858563486346"}, {0xa0, 0x10e, 0x6, "261d81ce29c5940ac597954168e2b80e74a6a711ae12c17e26e4f63e3b7ec7d0f4840f5f68bdeba0462730f08d9e0c9121434bdf17e5c98fc9e9626ae9411e0e756d37648efcd7d3695553aa91ffdbb2753ff077baa4921c9d98cbbb774db924640b7cb79f7af6239316c87bb0ef0b5a18be49a36daf557e0316f5a59c42357420d851200bb0686027c13a1402"}, {0x50, 0x101, 0x1, "add37fd11981764e814c69953123f9621d3dff950a2f0ee4d27d826701e2f8322347a4223fb4884b14b937e70ac9a80e8430815b4c7b1647eb548e57ac"}, {0x18, 0x0, 0x0, "a4"}, {0x18, 0x29, 0x80000001, "80f7932513"}], 0x148, 0x2000c090}, 0x101}, {{&(0x7f0000002d00)=@generic={0x1, "bd51fd75d2391249e589f8ca2b2cea590f280089d7f045210e1c9cda5f77ccefa18379c090e80ce9ea2a81ca59becf7694863c33faecf1ec87d87738e0d165ccad5e31f372b857bbd9a33f009457488f7bd533bf090efaf524c88562335c825711269763a551e655f1d3c795777f975c53b6d039dd988b98ada269067c2a"}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)="5a1b280d3faafcc554eda3d1f57f310c806f2214ebdc152dfcfa6ee2d24919697152b7dc83f5f264f1f15eb4cb3c3e82679c3cc853bdd0f570dbc7d5f2794b85e37cd2571df6d74a524420c3", 0x4c}, {&(0x7f0000002e00)="cb2c91ea6d3525075dd0952fb202c24355e9fa49b8dd8e18380670d730e1d56485328b8f1190e5395ee2c8a10b150e1505ebb3a5e5fd62c3030cbac5313ecbf2484ee680ab515b", 0x47}, {&(0x7f0000002e80)="5e77abd024c93b0e72c2", 0xa}, {&(0x7f0000002ec0)="aebdc416a2b02bc205a1bff9c9602313b3a7a12899ea9a67a2", 0x19}, {&(0x7f0000002f00)="e22c08dc0d5ddb814318ee1a5ddb7786cd8fe4e2f7240e2959ec5354136a7527", 0x20}, {&(0x7f0000002f40)="69cb709610451d00", 0x8}], 0x6, &(0x7f0000003000)=[{0x110, 0x10a, 0xfffffffffffffffd, "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"}, {0x18, 0x110, 0xd3e5, "e1ca3f"}, {0xe0, 0x11f, 0x0, "1a832ea18f92705c709b1920bff518c8822b79f67a91948ec60c65228fe67d390239f6122407458b76cff562d4ae96e69b28c8a88e2e8ce596a424f5c5d48196c37f21afdb43ea5d538effb3c70223160e2fea0855941ff20242b1cfcb11b531d364a526a0eb05ae8d3cccc0f8ac153bbbb49f31ac64d20bf109c41f5f08be1608afed3e9e3f14d18dcb1cb075809d11ed782927aa8b53d0aed26392083d83496a601dc21b9a1525866b6930754d4de1603ff7e81b31eb2555e53713c4afd654563b1d5f45706099d6bcfd05a4"}, {0xd0, 0x84, 0x52, "2e5ceb727b66e520c7e5e4d7c5b7630e044cbe2783e1cabb72be07f6c525b6b0761ecf20b7886c68d5cf6712a142abcdc4d9c04539520daa11327149fe6a09f729ff7ffb17e40342226e7fcd09e506bb7a8d14ceeeff7d8d7e1f39740841dde5af8f863ed7b8d5941c065f6b2376ef53613bc1dfe6b31d9ff8b6af822cc4fa2eba99abb4cbfc2d060088d448ddda4b3261000813ebd1b66cd1d46316088510ed4ffe3eb4c167c8a6a6108cfd84b463eb983a2c309a79a19da0"}], 0x2d8, 0x10}, 0x1}, {{&(0x7f0000003300)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003380)="47e79f567770756e5071b054bfa94db555add8528ae62c96b7744a61", 0x1c}], 0x1, &(0x7f0000003400)=[{0xa8, 0x118, 0x3, "905a334f72a3be317db615a1074ccbe79b5ccb252ea1933bc7bd2903f0f4169aa6a9d26ef46ad9d18575b3b05feb8a57a4a82015433e9d7027ffd288887383cd66bb9343e7c030c2bf09b161d118ba904074edd6da343e55d56afa23a5276c28886239d593d08b6ab3dfbe6bbeef9a91bc93680917f4ba61c8061d4bd0579d0cca67b7110f81372227583f159d206acad4b96aa9e3c5af32"}], 0xa8}, 0x100000001}, {{&(0x7f0000003640)=@can={0x1d, r2}, 0x80, &(0x7f0000004780)=[{&(0x7f00000036c0)="c2d4de27b93ebd2390495e5ca4b5f82af07ff246e61e6ec447715357", 0x1c}, {&(0x7f0000003700)="6ac26e878b5b26feb23a11695c69fa640154875a3c2595d8355bd6d3532015f9603c5b2d17a46bb7a1b441d0b3ec8390365ba460a1f5d7fa9d4a2e6408a9780bf45989d8c419167a8103d71f20bbd5cb18c86d91e59c8441708fb76cd0eb9895d98d864442e9224a3fcb6b5f694c4ff3841739d139c7", 0x76}, {&(0x7f0000003780)="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", 0x1000}], 0x3, &(0x7f00000047c0)=[{0x10, 0xff}, {0x70, 0x119, 0x7fff, "d0c3f24919827d9756b58411ac6cbf6fcdedabc4e3e5dcb4ff23316f5725a2a406586936df966d2a6421d727b0025b455c296ba251680e228cea0a96f2962a6aa127bb781fd01b4f0ed0566b23d39d984ce6241880115c713c73"}], 0x80, 0x40000}, 0x7f}, {{&(0x7f0000004840)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x80, &(0x7f0000004980)=[{&(0x7f00000048c0)="8c3d2db1b40106a7c78a769c94a69178ecef624b85a0e51c5b546c4b5054cec8f8de858cf94509f518a659b02b8eed5e51395e551a8842490aa188509bc7e02f06c4ff7b92a12d", 0x47}, {&(0x7f0000004940)="65a42d8bc0042d409039b137d99918301b500a941ebed5750c1e7a6ec1081973e7cf7573", 0x24}], 0x2, &(0x7f00000049c0)=[{0x18, 0x112, 0xff, "d9ce3cfe6a"}, {0x48, 0x100, 0x7, "d0f88afefdc9e4b7a79f52ba9d8864a6ec1c6fa280229e8c6538dbabbea92e7ec12baa43483deb4719671b891c645d4364"}, {0x10, 0x88, 0x6}, {0x28, 0x117, 0x2, "3b04e7cc5a95125e4d62debeccecce3eb1646a73cbeea9"}, {0x98, 0x117, 0x32, "691510a3f18f5c3e0114bec36cea6fc0c57159f41a3a732c303a2f133994653901982b9978bf9777b84e16d7c6ef8ee1037f419a35a745639125080520c9ee78778fc7fb9f1cfc6786172719fedf0fb25085eb37c7ef9ad7465d502ec5d719d77473e89a508bb5adefbc338f40f7be4fbaa9be9ddc7787a93b8a06ecada9d114e19dc010a8"}], 0x130, 0x4001}, 0x2}], 0x8, 0x40000) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 463.400878] binder: BINDER_SET_CONTEXT_MGR already set [ 463.433635] binder: 19209:19211 ioctl 40046207 0 returned -16 [ 463.436553] binder_alloc: 19209: binder_alloc_buf, no vma 08:42:10 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x87ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 463.449071] binder: release 19209:19211 transaction 297 in, still active [ 463.460206] binder: send failed reply for transaction 297 to 19209:19211 [ 463.552114] binder: 19209:19221 transaction failed 29189/-3, size 0-0 line 2973 [ 463.559654] binder: undelivered TRANSACTION_ERROR: 29189 08:42:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xe000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x325, 0x31e, 0x56, 0x3, 0x8, @dev={[], 0x20}}, 0x10) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') ioctl$RTC_WIE_OFF(r1, 0x7010) close(r0) 08:42:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x2, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x100000000000000, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 463.628035] binder: undelivered TRANSACTION_COMPLETE 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x100000000000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfffffdfd, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x806]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x4, 0x2, 0x1}) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xfffff7fffffffffc, 0x800000000000}, 0x10) close(r0) 08:42:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 463.795849] binder: 19255:19259 ioctl c0306202 200002c0 returned -22 [ 463.866672] binder_alloc: binder_alloc_mmap_handler: 19255 20001000-20004000 already mapped failed -16 [ 463.888781] binder: BINDER_SET_CONTEXT_MGR already set [ 463.901367] binder: 19255:19259 ioctl 40046207 0 returned -16 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x200000000000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 463.917261] binder_alloc: 19255: binder_alloc_buf, no vma [ 463.951024] binder: release 19255:19259 transaction 300 out, still active [ 463.958676] binder: 19255:19267 transaction failed 29189/-3, size 0-0 line 2973 [ 463.974544] binder: undelivered TRANSACTION_COMPLETE [ 463.994749] binder: release 19255:19259 transaction 300 in, still active [ 464.014851] binder: send failed reply for transaction 300, target dead 08:42:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfdfdffff00000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xc00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "06ee06f889ec3938134c805ce8100bdd9595ba599cef3e145c99a99b8eea8e5b768c1add1c3a7310ec205c3e68a923f28c7d5e34d605130a27c7dc780482e57139a3161dd7b5676958c59706982bddbbb5"}, 0x55) 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfdfdffff00000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x800e0000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 464.170880] binder: BINDER_SET_CONTEXT_MGR already set 08:42:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000240)={0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xffffffff}, 0x10) close(r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xda, 0xd356, 0x6, 0x6, 0x9, [{0x21, 0x7, 0x3, 0x0, 0x0, 0x402}, {0x8, 0x5, 0x0, 0x0, 0x0, 0x400}, {0x1, 0x3, 0x7fff, 0x0, 0x0, 0x8}, {0x9, 0x0, 0x4, 0x0, 0x0, 0x2000}, {0xf53, 0xfffffffffffffffb, 0x8001, 0x0, 0x0, 0x1000}, {0x8, 0x6, 0x7ff, 0x0, 0x0, 0x200}, {0x8, 0x1b6, 0x10000, 0x0, 0x0, 0x3288}, {0x80000001, 0x1ff, 0x88da, 0x0, 0x0, 0x4}, {0x0, 0x7f, 0x100, 0x0, 0x0, 0x200}]}) 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x1000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x100000000000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 464.203493] binder: 19288:19295 ioctl 40046207 200002c0 returned -16 [ 464.243077] binder_alloc: binder_alloc_mmap_handler: 19288 20001000-20004000 already mapped failed -16 [ 464.304954] binder: BINDER_SET_CONTEXT_MGR already set 08:42:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x2000000, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 464.330940] binder: 19288:19295 ioctl 40046207 0 returned -16 [ 464.333393] binder: release 19288:19295 transaction 303 out, still active [ 464.361103] binder: undelivered TRANSACTION_COMPLETE [ 464.371902] binder: release 19288:19295 transaction 303 in, still active [ 464.391103] binder: send failed reply for transaction 303, target dead 08:42:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf4010000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x200000000000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='teql0\x00', 0x180) 08:42:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfdfdffff, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x800e000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 464.532922] binder_alloc: binder_alloc_mmap_handler: 19324 20001000-20004000 already mapped failed -16 [ 464.565654] binder: BINDER_SET_CONTEXT_MGR already set 08:42:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x1000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) [ 464.617390] binder: 19324:19325 ioctl 40046207 0 returned -16 [ 464.648824] binder: release 19324:19325 transaction 305 out, still active [ 464.671535] binder: undelivered TRANSACTION_COMPLETE [ 464.676826] binder: release 19324:19325 transaction 305 in, still active 08:42:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x2, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x87060000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 464.735472] binder: send failed reply for transaction 305, target dead 08:42:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x2000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x400000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x3, 0x55, "e3c3fa82bf19c870bd8c002fff3e8d1fde4842d5ce6ea6266cbe9d7c6e4e929e4760755e924a31ed356e4d7e61b7162c7b39625fabcb8a02bd557228e7115b58e37f8762e58015546f4dee6fbc32379cf5a60ecdcf"}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x680000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x8698, 0x6, 0x8000, 0xffffffffffffffef, 0x0, 0x7b}) close(r0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0xc3, 0x8}) 08:42:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0xfffffdfd, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 464.885140] binder_alloc: binder_alloc_mmap_handler: 19350 20001000-20004000 already mapped failed -16 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2b000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 464.930026] binder: BINDER_SET_CONTEXT_MGR already set [ 464.970979] binder: 19350:19357 ioctl 40046207 0 returned -16 [ 464.977944] binder_alloc: 19350: binder_alloc_buf, no vma 08:42:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfdfdffff, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 465.017651] binder: release 19350:19357 transaction 307 out, still active [ 465.025387] binder: 19350:19359 transaction failed 29189/-3, size 0-0 line 2973 [ 465.035440] binder: undelivered TRANSACTION_COMPLETE [ 465.049424] binder: send failed reply for transaction 307, target dead 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x88480000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) close(r0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r1, 0x9, 0xec, r1}) 08:42:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfffffdfd, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 465.145957] binder_release_work: 2 callbacks suppressed [ 465.145965] binder: undelivered TRANSACTION_ERROR: 29189 08:42:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00d56c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4305]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 465.320814] binder: 19386 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 465.320828] binder: 19386:19394 ioctl c018620c 200002c0 returned -22 08:42:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fffffdfd0000000000000200"}) 08:42:12 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffff89]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000380)={{0x8, 0x1, 0x2a, 0x4, '\x00', 0x7fff}, 0x0, [0x6, 0x7, 0x3, 0x6, 0x500000000000000, 0x2, 0xfffffffffffffff8, 0x1ff, 0x9, 0x200, 0x6, 0x100, 0x8, 0xffffffff, 0x3, 0x6, 0x3, 0x10000, 0x9, 0x1, 0x6, 0xfffffffffffffff7, 0x1, 0x4, 0x0, 0x2, 0x401, 0x5, 0xcc0, 0x40, 0x8, 0x4, 0x4, 0x8001, 0x2, 0x5, 0x9, 0xff, 0x7, 0x8, 0x8, 0x2, 0x1f, 0x7, 0x9, 0x6, 0x8001, 0x3, 0xffffffffffffffff, 0x8001, 0x1, 0x0, 0x6, 0xffff, 0x7, 0x40, 0x9963, 0x1000, 0x1, 0x2, 0x9, 0x4, 0x8, 0x0, 0x3, 0x6, 0x1, 0x4, 0x3, 0x2ccf, 0x1, 0x0, 0x5, 0x9, 0xffffffffffff3a77, 0x100, 0x6, 0x6, 0x3, 0x6, 0x2, 0x8, 0x0, 0xf4a, 0xffffffffffff8000, 0x1ff, 0x4, 0x4, 0x7, 0x8, 0x0, 0x3, 0x6, 0x9, 0x9, 0x10000, 0x0, 0x100000000, 0xba8, 0x9, 0x8, 0x8, 0x5ba2, 0x8, 0x200, 0x634, 0x5, 0x100000000, 0x101, 0x10001, 0x0, 0x800, 0x20, 0x0, 0x80, 0x8001, 0x10000, 0xfffffffffffffffc, 0x3, 0x4000000000000000, 0x3ff, 0x0, 0x4, 0x6, 0x6, 0x8, 0x20, 0x3ff], {r2, r3+30000000}}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 08:42:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 465.373522] binder_alloc: binder_alloc_mmap_handler: 19386 20001000-20004000 already mapped failed -16 [ 465.427344] binder: BINDER_SET_CONTEXT_MGR already set 08:42:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfdfdffff00000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 465.471157] binder: 19386:19402 ioctl 40046207 0 returned -16 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x4788]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 465.513313] binder_alloc: 19386: binder_alloc_buf, no vma [ 465.513343] binder: undelivered TRANSACTION_COMPLETE [ 465.540673] binder: 19386:19394 transaction failed 29189/-3, size 0-0 line 2973 [ 465.555281] binder: send failed reply for transaction 310, target dead [ 465.582383] Unknown ioctl -993503982 [ 465.598652] Unknown ioctl 1074835010 [ 465.619936] Unknown ioctl -993503982 08:42:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x8706000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x100000000000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000001000000000000000000000200"}) [ 465.629505] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.630837] Unknown ioctl 1074835010 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x806000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x1000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) fstat(r0, &(0x7f0000000000)) 08:42:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x200000000000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000002000000000000000000000200"}) [ 465.816839] binder_alloc: binder_alloc_mmap_handler: 19429 20001000-20004000 already mapped failed -16 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2100]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 465.865729] binder: BINDER_SET_CONTEXT_MGR already set [ 465.885616] binder: 19429:19434 ioctl 40046207 0 returned -16 [ 465.917544] binder_alloc: 19429: binder_alloc_buf, no vma [ 465.936964] binder: undelivered TRANSACTION_COMPLETE 08:42:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x2000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 465.970096] binder: 19429:19437 transaction failed 29189/-3, size 0-0 line 2973 [ 465.978493] binder: send failed reply for transaction 313, target dead 08:42:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306209, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2f00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 466.066341] binder: undelivered TRANSACTION_ERROR: 29189 08:42:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cabfffffdfd000000000000000000000200"}) [ 466.169331] binder: 19462:19464 ioctl c0306209 200002c0 returned -22 [ 466.187354] binder: BINDER_SET_CONTEXT_MGR already set 08:42:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x687}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:13 executing program 3: bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(0xffffffffffffffff) [ 466.210510] binder_thread_write: 15 callbacks suppressed [ 466.210522] binder: 19462:19470 ERROR: BC_REGISTER_LOOPER called without request [ 466.211761] binder_alloc: 19462: binder_alloc_buf, no vma [ 466.247385] binder: 19462:19464 ioctl 40046207 0 returned -16 08:42:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0xfdfdffff, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xa00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 466.273895] binder: undelivered TRANSACTION_COMPLETE [ 466.279844] binder: 19462:19467 transaction failed 29189/-3, size 0-0 line 2973 [ 466.300708] binder: send failed reply for transaction 316, target dead 08:42:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab02000000000000000000000000000200"}) 08:42:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 466.388048] binder: undelivered TRANSACTION_ERROR: 29189 08:42:13 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3a000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x1000000, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cabfdfdffff000000000000000000000200"}) [ 466.535619] binder: 19490:19496 ERROR: BC_REGISTER_LOOPER called without request [ 466.572466] binder: 19490:19496 ioctl c0306263 200002c0 returned -22 08:42:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:14 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x1, 0x4, 0x100000001, {r1, r2+30000000}, 0x7, 0xb9}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r3) 08:42:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3300000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 466.608987] binder: BINDER_SET_CONTEXT_MGR already set [ 466.651143] binder: 19490:19508 ERROR: BC_REGISTER_LOOPER called without request [ 466.651156] binder: 19490:19496 ioctl 40046207 0 returned -16 08:42:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x2, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 466.697405] binder: send failed reply for transaction 319 to 19490:19496 [ 466.706944] binder: undelivered TRANSACTION_COMPLETE [ 466.729476] binder: 19490:19502 transaction failed 29189/-22, size 0-0 line 2834 [ 466.733329] binder: undelivered TRANSACTION_ERROR: 29189 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000010000000000000200"}) 08:42:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x8706}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x53, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) 08:42:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00d56c2874476ee83e417454f684cab00000000000000000000000000000200"}) [ 466.859414] binder: undelivered TRANSACTION_ERROR: 29189 08:42:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x89ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x7, 0x0, 0x4000000000000000, 0x80000001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0xffffff3d) close(r0) 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00020000000000000000000000000200"}) [ 466.996696] binder: 19532:19538 ERROR: BC_REGISTER_LOOPER called without request [ 467.014381] binder: 19532:19538 got transaction with invalid parent offset or type [ 467.024699] binder: 19532:19538 transaction failed 29201/-22, size 32-8 line 3095 [ 467.033341] binder: send failed reply for transaction 322 to 19532:19538 [ 467.088414] binder_alloc_mmap_handler: 2 callbacks suppressed [ 467.088431] binder_alloc: binder_alloc_mmap_handler: 19532 20001000-20004000 already mapped failed -16 08:42:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fffffdfd0000000000000200"}) 08:42:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x1400]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 467.153625] binder: BINDER_SET_CONTEXT_MGR already set [ 467.161929] binder: 19532:19538 ioctl 40046207 0 returned -16 [ 467.169188] binder_alloc: 19532: binder_alloc_buf, no vma [ 467.186819] binder: 19532:19550 ERROR: BC_REGISTER_LOOPER called without request 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00fdfdffff0000000000000000000200"}) [ 467.237100] binder: 19532:19557 got reply transaction with no transaction stack [ 467.240826] binder: undelivered TRANSACTION_ERROR: 29201 [ 467.250814] binder: undelivered TRANSACTION_ERROR: 29190 [ 467.263788] binder: 19532:19544 transaction failed 29189/-3, size 0-0 line 2973 [ 467.322911] binder: 19532:19557 transaction failed 29201/-71, size 32-8 line 2741 [ 467.354746] binder: undelivered TRANSACTION_ERROR: 29201 08:42:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x55, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0xfffffe78) chroot(&(0x7f0000000000)='./file0\x00') close(r0) 08:42:14 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x689]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000001000000000000000000000200"}) 08:42:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) [ 467.407137] binder: undelivered TRANSACTION_ERROR: 29189 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffffffa0008000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:15 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) open(&(0x7f0000000000)='./file0\x00', 0x161000, 0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xfffffffffffffffe}, 0x10) close(r1) 08:42:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000002000000000000000000000200"}) 08:42:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 467.528218] binder: 19574:19582 ERROR: BC_REGISTER_LOOPER called without request [ 467.562517] binder: 19574:19582 got transaction with invalid parent offset or type 08:42:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fffffdfd00000000000200"}) [ 467.603685] binder: 19574:19582 transaction failed 29201/-22, size 32-8 line 3095 [ 467.641215] binder: send failed reply for transaction 327 to 19574:19582 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x3c]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 467.699760] binder_alloc: binder_alloc_mmap_handler: 19574 20001000-20004000 already mapped failed -16 [ 467.745442] binder: BINDER_SET_CONTEXT_MGR already set [ 467.769466] binder: 19574:19582 ioctl 40046207 0 returned -16 08:42:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x7, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cabfffffdfd000000000000000000000200"}) 08:42:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000100000000000200"}) 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x43050000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 467.818260] binder: 19574:19596 ERROR: BC_REGISTER_LOOPER called without request [ 467.818955] binder_alloc: 19574: binder_alloc_buf, no vma [ 467.837592] binder: 19574:19582 transaction failed 29189/-3, size 0-0 line 2973 08:42:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00fffffdfd0000000000000000000200"}) 08:42:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab02000000000000000000000000000200"}) 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xf0]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}]}) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="24bca0abe40b036ca1b4c55b57328b2fc81cf802cedf644b0eadbccdef6ce77244a464f296c79dd89e63d7edb8cd4aeabc8f08a69005a2107285fbc3cf971813aee898cfa0a0ccc3f8a4f98488c37362c8996a65bb975aa524842096218a2100327d8503d2dc570b643524af0869ffe1c2b4d8510fa03f8edcfc000dc9fd6d48ceb0faa3e6de25cd1dbbb4ee91a202dc4763cf448b1d55deff9dba7629252cad690442d4a469156fa648e8df4fee2105582ec6dd50578ec721f3b5ae13ba29dc6ae858fa8b143940e5c2a945ae41ac0561c402a88af4d8f57c2724df1e9d"], 0x27) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x7, 0x0, 0x7, 0x0, 0x1, 0x2, 0x1, 0x7]}) [ 468.028666] binder: 19618:19621 ERROR: BC_REGISTER_LOOPER called without request [ 468.086472] binder: 19618:19628 unknown command 0 [ 468.120696] binder: 19618:19628 ioctl c0306201 200002c0 returned -22 [ 468.135373] binder_alloc: binder_alloc_mmap_handler: 19618 20001000-20004000 already mapped failed -16 08:42:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cabfdfdffff000000000000000000000200"}) [ 468.161269] binder: BINDER_SET_CONTEXT_MGR already set [ 468.166574] binder: 19618:19621 ioctl 40046207 0 returned -16 [ 468.193897] binder_alloc: 19618: binder_alloc_buf, no vma [ 468.206783] binder: 19618:19640 ERROR: BC_REGISTER_LOOPER called without request 08:42:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x74, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x900000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000010000000000000000000200"}) 08:42:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) 08:42:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 468.234747] binder: 19618:19628 transaction failed 29189/-3, size 0-0 line 2973 [ 468.260425] binder_thread_release: 8 callbacks suppressed [ 468.260437] binder: release 19618:19621 transaction 331 out, still active 08:42:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000010000000000000200"}) [ 468.341032] binder_release_work: 2 callbacks suppressed [ 468.341038] binder: undelivered TRANSACTION_COMPLETE 08:42:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000020000000000000000000200"}) 08:42:15 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 468.392777] binder: release 19618:19621 transaction 331 in, still active [ 468.422118] binder: send failed reply for transaction 331, target dead 08:42:15 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x39, 0x10002) r1 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x101, 0x2000c0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r1, 0x0, 0x8, 0xffffffffffffffb7, 0x2}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x0, 0x8001, @name="b78d067ce41425bdf15ae74db998cbc0a3b4e7fe64864dcf3d855e9af6ea5d09"}) close(r2) 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 468.485098] binder: 19653:19661 ERROR: BC_REGISTER_LOOPER called without request 08:42:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) [ 468.542245] binder_alloc: binder_alloc_mmap_handler: 19653 20001000-20004000 already mapped failed -16 08:42:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000fdfdffff00000000000000000200"}) [ 468.590531] binder: BINDER_SET_CONTEXT_MGR already set [ 468.608261] binder: release 19653:19661 transaction 334 out, still active [ 468.616039] binder_alloc: 19653: binder_alloc_buf, no vma [ 468.625176] binder: undelivered TRANSACTION_COMPLETE [ 468.641274] binder: release 19653:19661 transaction 334 in, still active [ 468.651839] binder: 19653:19661 ioctl 40046207 0 returned -16 [ 468.669323] binder: send failed reply for transaction 334, target dead [ 468.679700] binder: 19653:19666 transaction failed 29189/-3, size 0-0 line 2973 08:42:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x5, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x11000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) accept4(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@broadcast}}, {{}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) 08:42:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fffffdfd000000000200"}) 08:42:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fffffdfd00000000000200"}) 08:42:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x8060000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 468.867515] binder: 19687:19696 unknown command 0 08:42:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0xbf8, 0x4) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000200)=""/210) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000300)={0x4, 0x2, 0x3}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000380)={'broute\x00'}, &(0x7f0000000400)=0x78) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 468.900844] binder: 19687:19696 ioctl c0306201 200002c0 returned -22 [ 468.929533] binder_alloc: binder_alloc_mmap_handler: 19687 20001000-20004000 already mapped failed -16 08:42:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000001000000000200"}) 08:42:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000010000000000000000000200"}) [ 468.957887] binder: BINDER_SET_CONTEXT_MGR already set [ 469.001472] binder_alloc: 19687: binder_alloc_buf, no vma [ 469.013731] binder: release 19687:19696 transaction 337 out, still active [ 469.025788] binder: undelivered TRANSACTION_COMPLETE [ 469.028210] binder: 19687:19696 ioctl 40046207 0 returned -16 [ 469.044353] binder: 19687:19701 transaction failed 29189/-3, size 0-0 line 2973 08:42:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x40000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 469.048977] binder: release 19687:19696 transaction 337 in, still active [ 469.065424] binder: send failed reply for transaction 337, target dead 08:42:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x6800000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x108) accept4(r0, &(0x7f0000000080)=@hci={0x1f, 0x0}, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340004002c0000cfacdc01000900000600000000", @ANYRES32=r2, @ANYBLOB="f3ff0f000400fffff2ffffff0800050000000000080005005b010000"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000020000000000000000000200"}) 08:42:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) 08:42:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x2]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="4ecf7c06b468824ca28256ab60", 0xd}, {&(0x7f0000000040)="4b44768df657a773ba94ff60fd65749157f3aaee3a7d103aabf8f22b820664d4f3e7a97ae7d65b5342f7dbc31bdd1305a2535c2673dd176512ce7464563af9a1a74d96490365ecfdcdd05f025aae7156c218fc2ac2a4ad4bba2aae27841f326d322a0681f63da4cba5b1aab4d6308fe07159d6bce8a03b4cbe904d1b308e14de637fc1557625ad32d4e3e532cc00ab024d2b2c2a01e80a9f6205a353be7f743755fb2d0126436113ca828599922e011594e0ad5673c787188dc727288f9af1eeeed46f4d188f0a231ad4062ea1ce97ec7ab165dad14d595d27da60", 0xdb}, {&(0x7f0000000500)="eb6f3d75c36f232f3903c31df444cc0f98bd815b21c91f8502d7c52688f0c32e9ba74cc4ff9ceb020f5c4a8ef661d1acfd8c59ebbbdf082b823a5fa7701cca2c58263dc897b08789dd83a7a3", 0x4c}, {&(0x7f00000001c0)="2cbf475a9cadd8b70639475ccc03ff3581e4faa25919a3a26750d3de6dd60b71109288692189c4140c372901a2b98c360643babb0212cd369b8ba3955bb7db96dcebf5368e73f206e6fabefeca7a221ef109819e284430bbd0d35cea061fe2e543611961300de2520e8cb6d2042883f9de07b0f8e606ade736b26967e98120b54a2d44f27c015c192c2f969ae708f2055a21c3f81fc1742433c5c4484100a3ae669ddb13abcac2f69d428489cade5fae58f96b208f5ca9434ad6c68f1b79d37595d739a1b3c5e5b8a7e004fb56333d32bbe78710f0802f", 0xd7}, {&(0x7f00000002c0)="274a05b7be5b644c31913b4299bdb2126a109a8a0bac85d5d245e4562fb5cb2e5ec8ee7a2b5e0179068dd7cadeb8fd1fa0c5592594f962d616e4566f9833a18ea17538fa7839178e33c91f60cd0c25b4f355", 0x52}, {&(0x7f0000000380)="3145ebddcce0af7f1cbc80f2be0002b7f2ab979bad65f04c4b47d5379c87863ae2fab0dfdcdf095ac9623a3db5da8d950031f7acd5fb", 0x36}, {&(0x7f00000003c0)="d235e52a5f6b761ddee50966f7", 0xd}, {&(0x7f0000000400)="3f0b5a86320782326a35c9c8f511c85295826d931510063fe8b85f6ff9fdf799bef7d447459bde23953b931dcfdca914607f8455965d3132c244015bd50040e8a3cf16676efcab", 0xfffffffffffffe42}], 0x8, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0x7) [ 469.293604] binder_alloc: binder_alloc_mmap_handler: 19727 20001000-20004000 already mapped failed -16 [ 469.330765] binder: BINDER_SET_CONTEXT_MGR already set 08:42:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00fffffdfd0000000000000000000200"}) 08:42:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000200000000000000000200"}) [ 469.347859] binder_alloc: 19727: binder_alloc_buf, no vma [ 469.391413] binder: release 19727:19732 transaction 340 out, still active [ 469.398934] binder: undelivered TRANSACTION_COMPLETE [ 469.404781] binder: 19727:19732 ioctl 40046207 0 returned -16 [ 469.427181] binder: release 19727:19732 transaction 340 in, still active 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:16 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0xffffffffa0010000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 469.434602] binder: 19727:19735 transaction failed 29189/-3, size 0-0 line 2973 [ 469.443080] binder: send failed reply for transaction 340, target dead 08:42:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0xffffff7f00000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00020000000000000000000000000200"}) 08:42:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = socket$inet6(0xa, 0x6, 0xf61) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0xfffffffffffffffb, 0x1a3b, 0x5ffc, 0x1f}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x23}, 0x8) 08:42:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000fffffdfd00000000000000000200"}) 08:42:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:17 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x86ddffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000100000000000000000200"}) [ 469.704454] binder_alloc: binder_alloc_mmap_handler: 19759 20001000-20004000 already mapped failed -16 08:42:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) read(r0, &(0x7f0000000000)=""/228, 0xe4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001400)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) setuid(r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x40000000, 0x8, 0x5, 0x3, 0x1, 0x1, 0xe6ff, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000013c0)=0x1ff, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001380)=r3, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@vsock, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/96, 0x60, 0x9}, 0x10040) 08:42:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00fdfdffff0000000000000000000200"}) [ 469.746091] binder: BINDER_SET_CONTEXT_MGR already set 08:42:17 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2c]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 469.805979] binder: release 19759:19768 transaction 343 in, still active [ 469.814261] binder: 19759:19768 ioctl 40046207 0 returned -16 [ 469.832780] binder: send failed reply for transaction 343 to 19759:19768 08:42:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 469.865067] binder: undelivered TRANSACTION_COMPLETE 08:42:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x6000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000200000000000000000000000200"}) 08:42:17 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="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", 0xff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) bind$llc(r1, &(0x7f0000000340)={0x1a, 0x108, 0x0, 0x0, 0x5}, 0x10) close(r1) 08:42:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000100000000000200"}) 08:42:17 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x104]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 470.032228] binder_alloc: binder_alloc_mmap_handler: 19792 20001000-20004000 already mapped failed -16 08:42:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 470.081887] binder: BINDER_SET_CONTEXT_MGR already set [ 470.105604] binder: 19792:19796 ioctl 40046207 0 returned -16 [ 470.122309] binder_alloc: 19792: binder_alloc_buf, no vma [ 470.141583] binder: release 19792:19796 transaction 345 out, still active [ 470.148600] binder: undelivered TRANSACTION_COMPLETE 08:42:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000020000000200"}) 08:42:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) 08:42:17 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x84ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 470.161262] binder: 19792:19797 transaction failed 29189/-3, size 0-0 line 2973 [ 470.195755] binder: send failed reply for transaction 345, target dead 08:42:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x10) close(r0) 08:42:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x6000000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 470.276313] binder_release_work: 8 callbacks suppressed [ 470.276322] binder: undelivered TRANSACTION_ERROR: 29189 08:42:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fffffdfd0000000200"}) 08:42:17 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3a]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000200000000000000000200"}) 08:42:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 470.438152] binder_alloc: binder_alloc_mmap_handler: 19824 20001000-20004000 already mapped failed -16 [ 470.511041] binder: BINDER_SET_CONTEXT_MGR already set 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000001000000000000000200"}) 08:42:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 470.546799] binder: 19824:19830 ioctl 40046207 0 returned -16 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000fffffdfd00000000000000000200"}) [ 470.619433] binder_alloc: 19824: binder_alloc_buf, no vma [ 470.651305] binder: undelivered TRANSACTION_COMPLETE [ 470.657267] binder: send failed reply for transaction 348, target dead 08:42:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) rt_sigprocmask(0x2, &(0x7f0000000000)={0x800}, &(0x7f0000000040), 0x8) 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000002000000000000000200"}) 08:42:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x300, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 470.737683] binder: undelivered TRANSACTION_ERROR: 29189 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000200000000000000000000000200"}) 08:42:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 470.857972] binder_alloc: binder_alloc_mmap_handler: 19861 20001000-20004000 already mapped failed -16 [ 470.904852] binder: BINDER_SET_CONTEXT_MGR already set 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000fffffdfd000000000000000200"}) 08:42:18 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4040, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='rose0\x00') r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xcf, 0x5, 0x6, 0x27}, {0x28, 0x48, 0x4}]}, 0x10) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r1) close(r1) [ 470.932056] binder: 19861:19864 ioctl 40046207 0 returned -16 [ 470.966787] binder_alloc: 19861: binder_alloc_buf, no vma 08:42:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000fdfdffff00000000000000000200"}) 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2900]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.012533] binder: undelivered TRANSACTION_COMPLETE [ 471.022097] binder: send failed reply for transaction 351, target dead 08:42:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8706000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000002000000000000000000000200"}) 08:42:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x3f00, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 471.098959] binder: undelivered TRANSACTION_ERROR: 29189 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xffffff87]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000001000000000200"}) 08:42:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000002a, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x101000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000003c0)={0x990000, 0x20, 0x90, [], &(0x7f0000000380)={0x990af7, 0x6, [], @p_u16=&(0x7f0000000300)=0x3}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, 0x100, 0xd652, 0xfff}, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in6=@local, 0x4e23, 0xffffffffffff1022, 0x4e24, 0x3f, 0xa, 0x20, 0x0, 0x3a, 0x0, r2}, {0x2, 0x8000, 0x100000000, 0xfdf, 0xfffffffffffffec0, 0xfffffffffffffafc, 0x5, 0x8}, {0x7ff, 0x8001, 0x100}, 0x1, 0x6e6bb0, 0x1, 0x0, 0x98ce26db045ca151, 0x1}, {{@in=@loopback, 0x4d2, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x3, 0x0, 0x5c000000000, 0x6, 0x3, 0x1}}, 0xe8) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000400)={'veth1_to_bridge\x00', @ifru_mtu}) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r1) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000440)) [ 471.208665] binder: BINDER_SET_CONTEXT_MGR already set [ 471.220730] binder: 19896:19898 ioctl 40046207 0 returned -16 [ 471.247419] binder_thread_write: 13 callbacks suppressed 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000fdfdffff000000000000000200"}) 08:42:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 471.247446] binder: 19896:19899 ERROR: BC_REGISTER_LOOPER called without request 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x800000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.290671] binder_alloc: 19896: binder_alloc_buf, no vma 08:42:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) 08:42:18 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x84ffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.370026] binder: send failed reply for transaction 354 to 19896:19898 [ 471.395592] binder: undelivered TRANSACTION_COMPLETE 08:42:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x6c, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000010000000200"}) [ 471.436327] binder: undelivered TRANSACTION_ERROR: 29189 [ 471.459037] binder: undelivered TRANSACTION_ERROR: 29189 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000010000000000000200"}) 08:42:19 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xe8030000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.550091] binder: 19926:19931 ERROR: BC_REGISTER_LOOPER called without request 08:42:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8706}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:19 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0x0, 0xa9d, &(0x7f0000000000)="629873cf8ffc23e6ade19253eddf399de89b2a79c637bba8c7b1fb79a197f73e05b2217375ebd35570b732ebbe7505a15c6751e97f7f5e1323d3052483e683b8ed6780697de5cc108bc21d550f952fba6c9943ef8d0ffd74ca23bb7fcf20f37cd1c267598b0c1053e11b57e56eba7b91fdd07fba4b77292b8460ae7c4342b94f4b6bec89752dcb984bc4f74e8fb4f36f7dfb2e690e384ee2c1bd1685c2e3fe2e83d1655e2cbe", &(0x7f00000000c0)="c4c5ee8d863b045b61c6f03f8c83fcd4a8e63fe45a0d91476346231e630f79983f74081e8822fc473710d8515c6ca7bbbe83f5f0a8d5d5e016c4bae4b674344527c4", 0xa6, 0x42}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x40200, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) close(r1) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80040) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000380)={0x400080000000, 0x101, "a0ed2b4eaf1cc8fc1a2a4832338b2053c6b0b094c658594523fcfbe22ecf6567", 0x107, 0x100000000, 0x4, 0xffffffff80000009, 0x401, 0x638, 0x3, 0x7ff, [0x100000009, 0x1000000000000000, 0x8001, 0x7]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 08:42:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fffffdfd000000000200"}) [ 471.604414] binder: BINDER_SET_CONTEXT_MGR already set [ 471.609770] binder: 19926:19931 ioctl 40046207 0 returned -16 [ 471.671531] binder: undelivered TRANSACTION_COMPLETE [ 471.681170] binder: send failed reply for transaction 357, target dead [ 471.705233] Unknown ioctl -2147200512 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000020000000000000000000200"}) 08:42:19 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.736191] Unknown ioctl -2147200512 08:42:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x7a, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000100000000000000000200"}) 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fdfdffff0000000000000200"}) 08:42:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x401, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {r2, r3+30000000}, 0x2, 0x7fffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x3, &(0x7f00000000c0)="281200"}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x6, 0x1, 0x8, 0x4d, '\x00', 0x3}, 0x4, 0x40, 0x1ff, r4, 0x7, 0x4, 'syz1\x00', &(0x7f0000000140)=['/dev/midi#\x00', '/dev/midi#\x00', ':\x00', '/dev/midi#\x00', '/dev/midi#\x00', '.\'\x00', "656d3062646576406d696d655f74797065656d310500"], 0x47, [], [0x0, 0x0, 0x0, 0x3]}) 08:42:19 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x11]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 471.917351] binder: 19964:19965 ERROR: BC_REGISTER_LOOPER called without request 08:42:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000010000000200"}) 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fffffdfd00000200"}) 08:42:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 471.971104] binder: BINDER_SET_CONTEXT_MGR already set [ 471.976465] binder: 19964:19973 ioctl 40046207 0 returned -16 [ 471.984287] binder: 19964:19974 ERROR: BC_REGISTER_LOOPER called without request 08:42:19 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101c00, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1c00, 0x2, 0x2, 0x10001, 0x4, 0xbff6, 0x1, {0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x346}}, 0xa8ea, 0x7ff, 0x10000, 0x3, 0x6}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0xffffffff80000001, 0x30, 0x101, 0x7fff}, &(0x7f0000000200)=0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/59) syz_execute_func(&(0x7f0000000000)="c4a229971c8a46df9d0900000099c4417d702004f347dcf726ff5967c4636d4a6dd956f2ab47c13e328f097881470c") close(r2) 08:42:19 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xffffca88]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 472.105238] binder: send failed reply for transaction 359, target dead 08:42:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000020000000200"}) 08:42:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x2, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000100000200"}) [ 472.205983] binder: undelivered TRANSACTION_ERROR: 29189 08:42:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x101001, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002d00)={0x0, @in6={{0xa, 0x4e21, 0x7, @remote, 0xfffffffffffffffc}}, 0x40003, 0xffffffffffffffff, 0x6, 0x9, 0xc5}, &(0x7f0000002c00)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000001480)=@assoc_id=0x0, &(0x7f00000014c0)=0x4) sendmmsg$inet_sctp(r1, &(0x7f0000001600)=[{&(0x7f0000000240)=@in={0x2, 0x4e22, @rand_addr=0xfff}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001500)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8, 0x3f, 0x7fff, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0xffffffff, 0x894a, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x472b9512}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x100}, @sndrcv={0x30, 0x84, 0x1, {0xb5a4, 0x8, 0x8002, 0x7, 0x800, 0x1, 0xfaec, 0x6, r4}}], 0xd0, 0x1}], 0x1, 0x4000000) io_setup(0xaa, &(0x7f00000000c0)=0x0) io_cancel(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000100)="d730ec6bcb6a64b910dd7f18d48df8c6f4da87f05b189eafddb583d40f9e2391c330970477fa41ca872711272a2bb3e28d15581f61ab7e8dbc57eafaecad0ce6d4e9603aaec6fe2b275fa18970a1a72674b5287881ce49d7ff9440385b48827d9e996f9b545c3b7757f2", 0x6a, 0x4, 0x0, 0x1}, &(0x7f00000001c0)) recvmsg$kcm(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001640)=""/224, 0xe0}, {&(0x7f0000001740)=""/29, 0x1d}, {&(0x7f0000001780)=""/241, 0xf1}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/84, 0x54}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x9}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x8000) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000040)) 08:42:19 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8000a0ffffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fffffdfd0000000200"}) [ 472.333207] binder: 20001:20002 ERROR: BC_REGISTER_LOOPER called without request 08:42:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000200000200"}) [ 472.436258] binder: 20001:20016 unknown command 16456 [ 472.473225] binder: 20001:20016 ioctl c0306201 200002c0 returned -22 08:42:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2c000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 472.517136] binder_alloc_mmap_handler: 3 callbacks suppressed [ 472.517151] binder_alloc: binder_alloc_mmap_handler: 20001 20001000-20004000 already mapped failed -16 08:42:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000fffffdfd000000000000000200"}) 08:42:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) [ 472.563841] binder: BINDER_SET_CONTEXT_MGR already set [ 472.569169] binder: 20001:20002 ioctl 40046207 0 returned -16 [ 472.709502] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 472.709509] binder_alloc: 20001: binder_alloc_buf, no vma [ 472.749411] binder: 20001:20016 ERROR: BC_REGISTER_LOOPER called without request [ 472.811454] binder: send failed reply for transaction 362, target dead [ 472.811720] binder: 20001:20035 unknown command 16456 [ 472.828086] binder_transaction: 4 callbacks suppressed [ 472.828103] binder: 20001:20002 transaction failed 29189/-3, size 0-0 line 2973 [ 472.870477] binder: 20001:20035 ioctl c0306201 200002c0 returned -22 08:42:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x4800000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fffffdfd0000000000000200"}) 08:42:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x88480000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000001000000000000000200"}) 08:42:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x7fffffffffe, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 472.925346] binder: undelivered TRANSACTION_ERROR: 29189 08:42:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000002000000000000000200"}) 08:42:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fdfdffff00000000000200"}) 08:42:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xf0]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 473.048396] binder: 20048:20053 ERROR: BC_REGISTER_LOOPER called without request [ 473.095332] binder_alloc: binder_alloc_mmap_handler: 20048 20001000-20004000 already mapped failed -16 08:42:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 473.140400] binder: BINDER_SET_CONTEXT_MGR already set 08:42:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000001000200"}) [ 473.177089] binder: 20048:20067 ERROR: BC_REGISTER_LOOPER called without request [ 473.244765] binder_alloc: 20048: binder_alloc_buf, no vma [ 473.273019] binder: 20048:20056 transaction failed 29189/-3, size 0-0 line 2973 [ 473.301909] binder: 20048:20053 ioctl 40046207 0 returned -16 08:42:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x4000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1400]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000002000000000000000000000200"}) 08:42:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x33f, 0x0, 0x0, 0x1, 0x7, @broadcast}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000100)={0x5f6603a, 0x1, 0x3ff, 0x4, 0xa, 0xfff}) close(r0) 08:42:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000002000200"}) [ 473.385076] binder: undelivered TRANSACTION_ERROR: 29189 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8864]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 473.473845] binder: 20086:20087 ERROR: BC_REGISTER_LOOPER called without request 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000fdfdffff000000000000000200"}) 08:42:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x5, 0x2) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) [ 473.533276] binder_alloc: binder_alloc_mmap_handler: 20086 20001000-20004000 already mapped failed -16 [ 473.565136] binder: BINDER_SET_CONTEXT_MGR already set 08:42:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000000000fffffdfd000200"}) [ 473.615393] binder: 20086:20087 ioctl 40046207 0 returned -16 [ 473.615496] binder_alloc: 20086: binder_alloc_buf, no vma 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xfffffffffffff000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 473.665177] binder: 20086:20104 ERROR: BC_REGISTER_LOOPER called without request [ 473.670463] binder_thread_release: 14 callbacks suppressed [ 473.670474] binder: release 20086:20087 transaction 368 in, still active [ 473.681279] binder: send failed reply for transaction 368 to 20086:20087 [ 473.741259] binder: 20086:20103 transaction failed 29189/-3, size 0-0 line 2973 [ 473.762008] binder: undelivered TRANSACTION_ERROR: 29189 08:42:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x4c00, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fdfdffff0000000000000200"}) 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x4]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001040)='/dev/midi#\x00', 0x5797, 0x4003) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001080)=@assoc_value={0x0, 0x13}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001100)={r2, 0x8000}, 0x8) sendfile(r1, r0, 0x0, 0x8000) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000001}, 0x10) close(r0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001140)=""/4096) 08:42:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000100000000000200"}) [ 473.823975] binder_release_work: 3 callbacks suppressed [ 473.823981] binder: undelivered TRANSACTION_COMPLETE [ 473.834871] binder: undelivered TRANSACTION_ERROR: 29189 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000020000000000000000000200"}) 08:42:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) 08:42:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 473.949148] binder_alloc: binder_alloc_mmap_handler: 20131 20001000-20004000 already mapped failed -16 08:42:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x50880, 0x82) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/255) [ 474.001453] binder: BINDER_SET_CONTEXT_MGR already set 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x600000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 474.038466] binder: 20131:20132 ioctl 40046207 0 returned -16 [ 474.060943] binder_alloc: 20131: binder_alloc_buf, no vma [ 474.081104] binder: release 20131:20132 transaction 371 out, still active [ 474.088094] binder: undelivered TRANSACTION_COMPLETE [ 474.094233] binder: 20131:20132 transaction failed 29189/-3, size 0-0 line 2973 [ 474.122715] binder: release 20131:20132 transaction 371 in, still active 08:42:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x200000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fffffdfd00000000000200"}) 08:42:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000100000200"}) [ 474.149082] binder_send_failed_reply: 1 callbacks suppressed [ 474.149091] binder: send failed reply for transaction 371, target dead 08:42:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) accept4$llc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x401000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000200000000000000000200"}) 08:42:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000200000200"}) [ 474.278092] binder_alloc: binder_alloc_mmap_handler: 20162 20001000-20004000 already mapped failed -16 [ 474.340918] binder_alloc: 20162: binder_alloc_buf, no vma [ 474.343093] binder: release 20162:20164 transaction 374 out, still active [ 474.361283] binder: 20162:20164 transaction failed 29189/-3, size 0-0 line 2973 [ 474.371874] binder: undelivered TRANSACTION_COMPLETE 08:42:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x9) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:21 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x4000000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 474.386196] binder: release 20162:20164 transaction 374 in, still active 08:42:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fffffdfd00000200"}) [ 474.422370] binder: send failed reply for transaction 374, target dead 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x87ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x100000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x6, {0x6, 0x4, 0x3, 0x6}}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000010200"}) 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000010000000000000200"}) 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3300]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000020200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x687}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 474.661722] binder_alloc: binder_alloc_mmap_handler: 20205 20001000-20004000 already mapped failed -16 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) [ 474.706402] binder: BINDER_SET_CONTEXT_MGR already set [ 474.724663] binder: 20205:20206 ioctl 40046207 0 returned -16 08:42:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000fffffdfd0200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3c]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 474.787856] binder_alloc: 20205: binder_alloc_buf, no vma [ 474.793759] binder: release 20205:20206 transaction 377 out, still active [ 474.819474] binder: undelivered TRANSACTION_COMPLETE [ 474.828527] binder: 20205:20206 transaction failed 29189/-3, size 0-0 line 2973 [ 474.834373] binder: release 20205:20206 transaction 377 in, still active [ 474.893377] binder: send failed reply for transaction 377, target dead 08:42:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x700000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000fffffdfd0000000000000200"}) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000001000000000200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) sendto$llc(r0, &(0x7f0000000000)="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", 0xfa, 0x40000, &(0x7f0000000100)={0x1a, 0x322, 0x3, 0xfffffffffffffffc, 0x3, 0x7fffffff, @local}, 0x10) close(r0) fcntl$setlease(r0, 0x400, 0x1) 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x6]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x88ffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000000000fffffdfd000200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 475.062642] binder_alloc: binder_alloc_mmap_handler: 20246 20001000-20004000 already mapped failed -16 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) [ 475.138728] binder: BINDER_SET_CONTEXT_MGR already set [ 475.159933] binder: 20246:20248 ioctl 40046207 0 returned -16 [ 475.179372] binder_alloc: 20246: binder_alloc_buf, no vma 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xf401]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) [ 475.190741] binder: release 20246:20248 transaction 380 out, still active [ 475.198480] binder: 20246:20249 transaction failed 29189/-3, size 0-0 line 2973 [ 475.214059] binder: undelivered TRANSACTION_COMPLETE [ 475.230640] binder: release 20246:20248 transaction 380 in, still active [ 475.269939] binder: send failed reply for transaction 380, target dead 08:42:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x3f00000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fffffdfd000000000200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x87060000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 475.311412] binder_release_work: 3 callbacks suppressed [ 475.311419] binder: undelivered TRANSACTION_ERROR: 29189 08:42:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x14]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fffffdfd00000000000200"}) 08:42:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000002000000000000000200"}) 08:42:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0x9, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 475.431832] binder_alloc: binder_alloc_mmap_handler: 20276 20001000-20004000 already mapped failed -16 08:42:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xc000, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000040)=0x40000000485bd, 0x12) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x7, 0x8, {0x57, 0x2, 0xffff, {0x8, 0x3}, {0xd1da, 0x6c}, @cond=[{0x9, 0x100, 0x2, 0x1, 0x4, 0x8001}, {0x4, 0x4, 0x6, 0x60, 0x5, 0x5}]}, {0x53, 0x7fffffff, 0x319b, {0xffffffffffffffc0, 0x81}, {0x8001, 0x6}, @ramp={0x50c, 0x0, {0x100000000, 0x3, 0xebc, 0x6}}}}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x2000000000, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x0, r2}) close(r0) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000100000000000200"}) 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x9]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 475.527430] binder: BINDER_SET_CONTEXT_MGR already set 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fdfdffff000000000200"}) [ 475.547917] binder: 20276:20277 ioctl 40046207 0 returned -16 [ 475.605936] binder: release 20276:20277 transaction 383 out, still active [ 475.617720] binder: undelivered TRANSACTION_COMPLETE 08:42:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x2000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xb, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r2 = getgid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}], {0x4, 0x2}, [{0x8, 0x1, r2}, {0x8, 0x2, r3}], {0x10, 0x4}, {0x20, 0x5}}, 0x3c, 0x1) close(r0) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000200000000000000000200"}) [ 475.653701] binder: send failed reply for transaction 383, target dead 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xffffff8d]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000100"}) 08:42:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {r2, r3/1000+10000}}) close(r0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xe92) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000fdfdffff00000000000200"}) [ 475.822771] binder_alloc: binder_alloc_mmap_handler: 20320 20001000-20004000 already mapped failed -16 08:42:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0x2000010c, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 475.866475] binder: BINDER_SET_CONTEXT_MGR already set 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000d00"}) [ 475.891796] binder: 20320:20321 ioctl 40046207 0 returned -16 08:42:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) recvmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000280)=@can={0x1d, 0x0}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/107, 0xffffffffffffff43}, {&(0x7f0000000780)=""/37, 0x25}], 0x7, &(0x7f0000000840)=""/72, 0x48, 0xcec5}, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', r2}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={r3, 0x63cd, 0x1f, 0xff, 0x5, 0x0, 0x6}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x3982b72, 0x5}) r4 = gettid() move_pages(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x8000], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x6) [ 475.972221] binder: undelivered TRANSACTION_COMPLETE [ 475.978969] binder: send failed reply for transaction 385, target dead 08:42:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x7a000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xe000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000001000200"}) 08:42:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 476.082550] Unknown ioctl -2147202832 [ 476.139618] Unknown ioctl -2147202832 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fdfdffff0000000200"}) 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x6400]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000002000200"}) 08:42:23 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40100, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x600}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '/dev/dlm-monitor\x00'}, &(0x7f0000000100)=""/120, 0x78) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000180)=0x5, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) [ 476.181244] binder_alloc: binder_alloc_mmap_handler: 20355 20001000-20004000 already mapped failed -16 [ 476.257202] binder: BINDER_SET_CONTEXT_MGR already set 08:42:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000fffffdfd0200"}) [ 476.278008] binder: 20355:20357 ioctl 40046207 0 returned -16 [ 476.310883] binder_thread_write: 13 callbacks suppressed [ 476.310893] binder: 20355:20360 ERROR: BC_REGISTER_LOOPER called without request 08:42:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000020000000200"}) 08:42:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x7400, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:23 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1100]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) rt_sigaction(0x30, &(0x7f0000000400)={&(0x7f0000000380)="8fa9a0936a0fc481f928bc20ef000000c48295a96300c48121f69700000000f30f38f63470f2f045804d0597640f186a00660f38010d0000008141a7c4c17d2f3e", {0x8}, 0x40000004, &(0x7f0000000300)="40ecf22ef245e3ea660f73d60866f047f75689d9f1c44211b983090000008f0870950cf26a64673e640fb528e723400f38072f"}, &(0x7f00000004c0)={&(0x7f0000000440)="c4224dbe7206c4e1796f729341156db600006666430f5eaf25000000440f01d9660f7fddd0b102000000410f0565f0f65bd7c421fe70adedd6950000", {}, 0x0, &(0x7f0000000480)="f3440f2b8208000000c4617d7520c4411d71e51143e9000001003e66470f3a0d061a0f18d8d9f3c462b2f73cb18fa908948efeefffff44d9e0"}, 0x8, &(0x7f0000000500)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20040, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r2, 0x122, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x69}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4048800) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) truncate(&(0x7f0000000540)='./file0\x00', 0x1000) close(r0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000200)={0x5, 0x0, [{}, {}, {}, {}, {}]}) [ 476.343755] binder_alloc: 20355: binder_alloc_buf, no vma [ 476.356680] binder: 20355:20357 transaction failed 29189/-3, size 0-0 line 2973 [ 476.378062] binder: send failed reply for transaction 387 to 20355:20357 [ 476.425737] binder: undelivered TRANSACTION_ERROR: 29189 [ 476.448396] binder: undelivered TRANSACTION_COMPLETE 08:42:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2f00000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 476.484305] binder: undelivered TRANSACTION_ERROR: 29189 08:42:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000001000000000200"}) [ 476.525877] binder: 20387:20391 ERROR: BC_REGISTER_LOOPER called without request 08:42:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000000)={0xdd0, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @multicast2}, 0x80, 0x0, 0x4, 0x80000000, 0x7, 0x0, 0xfffffffffffffde9, 0x9e, 0x200}) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffffffffffffffff}, 0x10) close(r0) 08:42:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fffffdfd0000000200"}) 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xfeffffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 476.586779] binder: BINDER_SET_CONTEXT_MGR already set [ 476.603757] binder: 20387:20401 ERROR: BC_REGISTER_LOOPER called without request 08:42:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 476.662703] binder: undelivered TRANSACTION_COMPLETE [ 476.670827] binder: send failed reply for transaction 390, target dead [ 476.678079] binder_alloc: 20387: binder_alloc_buf, no vma [ 476.693965] binder: 20387:20391 ioctl 40046207 0 returned -16 08:42:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1100000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 476.711600] binder: 20387:20398 transaction failed 29189/-3, size 0-0 line 2973 08:42:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0xfdfdffff, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000010000000200"}) 08:42:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280)) 08:42:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fffffdfd000000000200"}) [ 476.818031] binder: undelivered TRANSACTION_ERROR: 29189 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x14000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fdfdffff00000200"}) 08:42:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000002000000000000000200"}) [ 476.974671] binder: 20432:20434 ERROR: BC_REGISTER_LOOPER called without request 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 477.022619] binder: BINDER_SET_CONTEXT_MGR already set 08:42:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 477.047309] binder: 20432:20444 ERROR: BC_REGISTER_LOOPER called without request [ 477.071995] binder_alloc: 20432: binder_alloc_buf, no vma 08:42:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000100000200"}) 08:42:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 477.096995] binder: undelivered TRANSACTION_COMPLETE [ 477.103539] binder: 20432:20434 ioctl 40046207 0 returned -16 [ 477.109613] binder: send failed reply for transaction 393, target dead [ 477.130614] binder: 20432:20442 transaction failed 29189/-3, size 0-0 line 2973 08:42:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x700, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000fdfdffff000000000200"}) [ 477.224436] binder: undelivered TRANSACTION_ERROR: 29189 [ 477.313347] binder: 20464:20465 ERROR: BC_REGISTER_LOOPER called without request [ 477.335744] binder: BINDER_SET_CONTEXT_MGR already set [ 477.340606] binder: 20464:20469 ERROR: BC_REGISTER_LOOPER called without request [ 477.350835] binder: send failed reply for transaction 396, target dead [ 477.355386] binder: 20464:20465 ioctl 40046207 0 returned -16 [ 477.373701] binder: undelivered TRANSACTION_ERROR: 29189 08:42:25 executing program 3: 08:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x80350000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000200000200"}) 08:42:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000010200"}) 08:42:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x1000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:25 executing program 3: [ 477.821979] binder: 20476:20477 ERROR: BC_REGISTER_LOOPER called without request [ 477.840679] binder_alloc_mmap_handler: 3 callbacks suppressed [ 477.840698] binder_alloc: binder_alloc_mmap_handler: 20476 20001000-20004000 already mapped failed -16 08:42:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x88caffff00000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 477.872902] binder: BINDER_SET_CONTEXT_MGR already set [ 477.888197] binder: 20476:20477 ioctl 40046207 0 returned -16 08:42:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fffffdfd00000200"}) 08:42:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000020200"}) [ 477.913971] binder_alloc: 20476: binder_alloc_buf, no vma [ 477.942061] binder: 20476:20490 ERROR: BC_REGISTER_LOOPER called without request 08:42:25 executing program 3: 08:42:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8906000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 477.987609] binder: send failed reply for transaction 399, target dead [ 477.994930] binder_transaction: 1 callbacks suppressed [ 477.994949] binder: 20476:20485 transaction failed 29189/-3, size 0-0 line 2973 08:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) 08:42:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000d00"}) 08:42:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x3f000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:25 executing program 3: [ 478.117771] binder: undelivered TRANSACTION_ERROR: 29189 08:42:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2f000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000000000fdfdffff000200"}) 08:42:25 executing program 3: [ 478.290771] binder: 20516:20519 ERROR: BC_REGISTER_LOOPER called without request [ 478.300047] binder_alloc: binder_alloc_mmap_handler: 20516 20001000-20004000 already mapped failed -16 08:42:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000100"}) [ 478.345415] binder: BINDER_SET_CONTEXT_MGR already set 08:42:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3c000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 478.388350] binder: 20516:20519 ioctl 40046207 0 returned -16 [ 478.428198] binder_alloc: 20516: binder_alloc_buf, no vma 08:42:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000020000000000000200"}) 08:42:25 executing program 3: 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000001000200"}) [ 478.450930] binder: 20516:20522 transaction failed 29189/-3, size 0-0 line 2973 08:42:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x6, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xfeffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:26 executing program 3: [ 478.584117] binder: undelivered TRANSACTION_ERROR: 29189 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000002000200"}) 08:42:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fdfdffff0000000200"}) 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 478.681972] binder: 20551:20555 unknown command 0 [ 478.700224] binder: 20551:20555 ioctl c0306201 200002c0 returned -22 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3f000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:26 executing program 3: [ 478.753804] binder_alloc: binder_alloc_mmap_handler: 20551 20001000-20004000 already mapped failed -16 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000000000fffffdfd000200"}) [ 478.800925] binder: BINDER_SET_CONTEXT_MGR already set [ 478.817907] binder_thread_release: 14 callbacks suppressed [ 478.817918] binder: release 20551:20555 transaction 405 out, still active 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000010000000200"}) [ 478.846579] binder: 20551:20562 ioctl 40046207 0 returned -16 [ 478.857244] binder_release_work: 3 callbacks suppressed [ 478.857250] binder: undelivered TRANSACTION_COMPLETE [ 478.886572] binder: release 20551:20555 transaction 405 in, still active 08:42:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x500000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xc000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:26 executing program 3: 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:26 executing program 3: 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xfffffff5]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000020000000200"}) [ 479.105564] binder_alloc: binder_alloc_mmap_handler: 20585 20001000-20004000 already mapped failed -16 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1f4]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 479.155961] binder: BINDER_SET_CONTEXT_MGR already set 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000020200"}) 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 479.184301] binder: 20585:20590 ioctl 40046207 0 returned -16 [ 479.185149] binder: release 20585:20590 transaction 407 out, still active [ 479.198228] binder: undelivered TRANSACTION_COMPLETE [ 479.204080] binder_alloc: 20585: binder_alloc_buf, no vma 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 479.231758] binder: release 20585:20590 transaction 407 in, still active [ 479.238648] binder_send_failed_reply: 2 callbacks suppressed [ 479.238655] binder: send failed reply for transaction 407, target dead [ 479.251669] binder: 20585:20595 transaction failed 29189/-3, size 0-0 line 2973 08:42:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x4c000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000fffffdfd0000000200"}) 08:42:26 executing program 3: 08:42:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x20480]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 479.342327] binder: undelivered TRANSACTION_ERROR: 29189 08:42:26 executing program 3: 08:42:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000fffffdfd0200"}) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3300000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000200000000000200"}) [ 479.523754] binder_alloc: binder_alloc_mmap_handler: 20619 20001000-20004000 already mapped failed -16 [ 479.569640] binder: BINDER_SET_CONTEXT_MGR already set 08:42:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 08:42:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) [ 479.608974] binder: 20619:20628 ioctl 40046207 0 returned -16 [ 479.609082] binder_alloc: 20619: binder_alloc_buf, no vma 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x1400000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 479.655135] binder: release 20619:20623 transaction 410 in, still active [ 479.677871] binder: send failed reply for transaction 410 to 20619:20623 08:42:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x60, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fdfdffff00000200"}) 08:42:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000020000000200"}) [ 479.702470] binder: 20619:20633 transaction failed 29189/-3, size 0-0 line 2973 [ 479.720726] binder: undelivered TRANSACTION_COMPLETE [ 479.742168] binder: undelivered TRANSACTION_ERROR: 29189 08:42:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x0, 0x7, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x0, 0xf6]}) 08:42:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x800e0000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 08:42:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000fdfdffff0200"}) 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000100000200"}) [ 479.878901] binder_alloc: binder_alloc_mmap_handler: 20654 20001000-20004000 already mapped failed -16 [ 479.931195] binder: BINDER_SET_CONTEXT_MGR already set [ 479.936536] binder: 20654:20655 ioctl 40046207 0 returned -16 08:42:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:27 executing program 3: r0 = socket$inet(0x2, 0x803, 0x7) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000003c0)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @local}, 0xc) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x9000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 479.987044] binder_alloc: 20654: binder_alloc_buf, no vma [ 480.011354] binder: release 20654:20655 transaction 413 out, still active [ 480.020710] binder: undelivered TRANSACTION_COMPLETE [ 480.026617] binder: 20654:20662 transaction failed 29189/-3, size 0-0 line 2973 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000200000200"}) [ 480.045650] binder: release 20654:20655 transaction 413 in, still active [ 480.074415] binder: send failed reply for transaction 413, target dead 08:42:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0xfdfdffff00000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) 08:42:27 executing program 3: r0 = socket$inet6(0xa, 0x20800a0, 0x80881) ioctl(r0, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x1ff) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x400000000007fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r4, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x9, 0x7, 0x3, 0xa219}, 0xfffffffffffffe30) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000140), &(0x7f0000000600), &(0x7f0000000840)) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x9, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x0, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000003c0)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000880)) 08:42:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000010200"}) 08:42:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110021000000000000000000fee293000000000000000000000000000000000000003200"], 0x1}}, 0x0) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x4000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 480.238009] binder_alloc: binder_alloc_mmap_handler: 20686 20001000-20004000 already mapped failed -16 [ 480.283385] binder: BINDER_SET_CONTEXT_MGR already set 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab0000000000000000fffffdfd00000200"}) 08:42:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000000000000000d00"}) [ 480.327119] binder_alloc: 20686: binder_alloc_buf, no vma [ 480.327184] binder: 20686:20689 ioctl 40046207 0 returned -16 [ 480.332801] binder: release 20686:20689 transaction 416 out, still active [ 480.367212] ------------[ cut here ]------------ [ 480.371991] DEBUG_LOCKS_WARN_ON(depth <= 0) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0xffffdd86]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 480.372118] WARNING: CPU: 1 PID: 20704 at kernel/locking/lockdep.c:3595 lock_release+0x740/0xa10 [ 480.382619] kobject: 'loop2' (000000000b72a2a6): kobject_uevent_env [ 480.385360] Kernel panic - not syncing: panic_on_warn set ... [ 480.397643] CPU: 1 PID: 20704 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 480.403398] kobject: 'loop2' (000000000b72a2a6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 480.406211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.406216] Call Trace: 08:42:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab00000000000000000002000000000200"}) 08:42:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x608]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 480.406237] dump_stack+0x244/0x39d [ 480.406257] ? dump_stack_print_info.cold.1+0x20/0x20 [ 480.436479] panic+0x2ad/0x55c [ 480.439685] ? add_taint.cold.5+0x16/0x16 [ 480.443862] ? __warn.cold.8+0x5/0x45 [ 480.447681] ? lock_release+0x740/0xa10 [ 480.451663] __warn.cold.8+0x20/0x45 [ 480.455384] ? lock_release+0x740/0xa10 [ 480.459369] report_bug+0x254/0x2d0 [ 480.463044] do_error_trap+0x11b/0x200 [ 480.466942] do_invalid_op+0x36/0x40 [ 480.469479] kobject: 'loop2' (000000000b72a2a6): kobject_uevent_env 08:42:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xf1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f000000c000)={0xd, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e00456c2874476ee83e417454f684cab000000000000000000fdfdffff000200"}) [ 480.470667] ? lock_release+0x740/0xa10 [ 480.470685] invalid_op+0x14/0x20 [ 480.470702] RIP: 0010:lock_release+0x740/0xa10 [ 480.470721] Code: 03 38 d0 7c 08 84 d2 0f 85 da 02 00 00 8b 35 a7 95 b3 08 85 f6 75 15 48 c7 c6 20 66 2b 88 48 c7 c7 c0 33 2b 88 e8 10 36 e7 ff <0f> 0b 48 8b 95 e8 fe ff ff 4c 89 f7 48 8b b5 f0 fe ff ff e8 e8 58 [ 480.477135] kobject: 'loop2' (000000000b72a2a6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 480.481070] RSP: 0018:ffff8801bd6f7868 EFLAGS: 00010086 08:42:28 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x6400000000000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 480.481082] RAX: 0000000000000000 RBX: 1ffff10037adef12 RCX: ffffc9001338e000 [ 480.481090] RDX: 0000000000007e77 RSI: ffffffff8165ba15 RDI: 0000000000000006 [ 480.481099] RBP: ffff8801bd6f7998 R08: ffff8801d4d6c2c0 R09: fffffbfff12b2254 [ 480.481114] R10: fffffbfff12b2254 R11: ffffffff895912a3 R12: ffffffff8b0e27a0 [ 480.546781] kobject: 'loop2' (000000000b72a2a6): kobject_uevent_env [ 480.551851] R13: ffff8801bd6f7970 R14: ffff8801d4d6c2c0 R15: ffff8801bd6f78b0 [ 480.551876] ? vprintk_func+0x85/0x181 [ 480.551894] ? lock_release+0x740/0xa10 [ 480.551987] ? loop_control_ioctl+0xf5/0x4e0 [ 480.558378] kobject: 'loop2' (000000000b72a2a6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 480.565588] ? lock_downgrade+0x900/0x900 [ 480.565602] ? __radix_tree_lookup+0x3a7/0x500 [ 480.565617] ? radix_tree_insert+0x870/0x870 [ 480.565636] ? find_held_lock+0x36/0x1c0 [ 480.604462] __mutex_unlock_slowpath+0x102/0x8c0 [ 480.609227] ? __fget+0x4aa/0x740 [ 480.612684] ? wait_for_completion+0x8a0/0x8a0 [ 480.615378] binder: 20686:20693 transaction failed 29189/-3, size 0-0 line 2973 08:42:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x300000000000000, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 480.617274] ? check_preemption_disabled+0x48/0x280 [ 480.627602] kobject: 'loop2' (000000000b72a2a6): kobject_uevent_env [ 480.629720] ? radix_tree_lookup+0x21/0x30 [ 480.629736] ? idr_find+0x44/0x50 [ 480.629758] ? loop_lookup+0x105/0x230 [ 480.639054] kobject: 'loop2' (000000000b72a2a6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 480.640378] ? loop_exit_cb+0x20/0x20 [ 480.640397] mutex_unlock+0xd/0x10 [ 480.640413] loop_control_ioctl+0xf5/0x4e0 [ 480.640432] ? loop_add+0xa20/0xa20 [ 480.660937] kobject: 'loop1' (00000000178f78c5): kobject_uevent_env [ 480.660966] ? __might_fault+0x12b/0x1e0 [ 480.664507] kobject: 'loop1' (00000000178f78c5): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 480.668723] ? lock_downgrade+0x900/0x900 [ 480.685499] binder: BINDER_SET_CONTEXT_MGR already set [ 480.692204] ? lock_release+0xa10/0xa10 [ 480.692219] ? perf_trace_sched_process_exec+0x860/0x860 [ 480.692237] ? loop_add+0xa20/0xa20 [ 480.692256] do_vfs_ioctl+0x1de/0x1790 [ 480.696465] binder: 20717:20718 ioctl 40046207 0 returned -16 [ 480.701665] ? ioctl_preallocate+0x300/0x300 [ 480.701680] ? __fget_light+0x2e9/0x430 [ 480.701694] ? fget_raw+0x20/0x20 [ 480.701705] ? _copy_to_user+0xc8/0x110 [ 480.701727] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 480.709641] binder_alloc: 20686: binder_alloc_buf, no vma [ 480.711126] ? put_timespec64+0x10f/0x1b0 [ 480.711142] ? nsecs_to_jiffies+0x30/0x30 [ 480.711159] ? do_syscall_64+0x9a/0x820 [ 480.711174] ? do_syscall_64+0x9a/0x820 [ 480.711195] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 480.715139] binder: 20717:20718 transaction failed 29189/-3, size 0-0 line 2973 [ 480.718701] ? security_file_ioctl+0x94/0xc0 [ 480.718716] ksys_ioctl+0xa9/0xd0 [ 480.718735] __x64_sys_ioctl+0x73/0xb0 [ 480.791352] do_syscall_64+0x1b9/0x820 [ 480.795249] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 480.800623] ? syscall_return_slowpath+0x5e0/0x5e0 [ 480.805562] ? trace_hardirqs_on_caller+0x310/0x310 [ 480.810585] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 480.815667] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 480.822354] ? __switch_to_asm+0x40/0x70 [ 480.826424] ? __switch_to_asm+0x34/0x70 [ 480.830502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.835358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.840556] RIP: 0033:0x457569 [ 480.843759] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.862657] RSP: 002b:00007f63858d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.870352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 480.877604] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 [ 480.884868] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 480.892121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63858d46d4 [ 480.899373] R13: 00000000004c06f1 R14: 00000000004d1028 R15: 00000000ffffffff [ 480.907727] Kernel Offset: disabled [ 480.911353] Rebooting in 86400 seconds..