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", 0x1000}], 0x1, &(0x7f0000004040)=[@prinfo={0x18, 0x84, 0x5, {0x293ce6b7f86f3dc8, 0x1}}], 0x18, 0x4}, {&(0x7f0000004080)=@in6={0xa, 0x4e23, 0x100000000, @mcast1={0xff, 0x1, [], 0x1}, 0xd64}, 0x1c, &(0x7f00000053c0)=[{&(0x7f00000040c0)="9d51492636a620e2fb4f6a4e3d1c99a187b25c371c9f0e8e03c72b368fe7cc2598e6f7420d9de921028f26a2e194f2570a171ffd79b5b425528076e70bfeb3b7c9bda32513165b983fa92eaa49c44669c6cf1f78590934f7369b73000dcc8c58a0bc1a81dcaf48554e8ef0c4d7a9c21b916618a8c832f6b6ab47c3865a5c3fc11fa3a438aa969e7d7bf5f2abb3742a4f4a00f8ca41f94953f61dbd8a0a6054ad5337befc379afe38d88d7ca7dc9bfa", 0xaf}, {&(0x7f0000004180)="3eb4081ae38564a93bd10ae4dadb1cfa63b5715e18206b00b918e7f471557ddef80bf6cc5ad96203745f87beaa7ef26ec87ecad67f22596385cba62e85763b8ae7ef1bfcfd9eff3fcad4fd7c9e0e20187ae3c3f4bc8b257ff39cf9e6b0b4f4113e3e3b66f0375d16d6df788319fb01e47e40571aebdbac7b448e110564f6f92461addf53ffe93edba843ddda2a37b50df1b60fd2c1a59f893dd951acfa6a90ccb2f9089a1bd73a8511", 0xa9}, {&(0x7f0000004240)="272dec21064e1c03a6d2200972126c27bcfd86c0c643bd3284ad60e5ac542b09f4f49bb174cdd6fbe11f43f48f57f0d7c08705ebe5615ed46d843504b465bddf902287740816f38122f12371763a41517724573a5d00cb2d229f4be0610082c987f1bdd9f51966feb1405389ed8f32261ff6d48d4e28c790119efae6b011114736c7a6da27da1cd1585efe061cab9bd85d0af8931f47394fe0dbb48f8c8467984bbab2da1f3d0826f44d04829412ef00d855da8f3e3bfd5b74674ef4c4193d3f770579cd0d7595b5c42540d344d4815ee1f0a25aa99ede6ceed1ef6d027efc1ef4b7a04566", 0xe5}, {&(0x7f0000004340)="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", 0x1000}, {&(0x7f0000005340)="680ac846caf8a3bd497dfa21625cbb3f367b5353a9aa692939b2e3e9949131500e90ea83dda65ae51b653e2fb95c50ee0f07ed0aa2bda68ae449b0a7f451528facd2a637a2", 0x45}], 0x5, &(0x7f0000005540)=[@sndrcv={0x30, 0x84, 0x1, {0xfc000000000, 0x6, 0x4, 0x1, 0x94a, 0x33, 0x7, 0x8, r11}}, @authinfo={0x18, 0x84, 0x6, {0xfffffffffffffff7}}], 0x48, 0x1}, {&(0x7f00000055c0)=@in6={0xa, 0x4e22, 0xffffffffffffd276, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c, &(0x7f0000005880)=[{&(0x7f0000005600)="f60390df5264cdce2a26d5959759d20ce79431efaad4d33228b35c435f45d5f24df0711f099e478878502170418f3565b32d36f46dc8ea28eaab8a5ddce1b214900317749ad554a3e002eec09f49b74fdd7903a14a02f2e5de3bbe427956e36f7ec4d6", 0x63}, {&(0x7f0000005680)="d66c16be4412c0caf9d917d5b827cad0171666f79a371f7bd01ffd542847bb6eba4439da6316983c0af653f9961c71c20a6d4b094c8ca51abb2d541a43f04be93679272ae6674f19cc1a2f40f046adcd0bdc1eb3b3d9a16e64f128ae43f509305049397c6189ee68f7bc3fa091fc3ff7d54fc0cf9968d7e70c993125456b47ff46459d3e2af0be5b3ce6dd7c5915603835716ed1b96c320dfbd5f8d08f2354e1348817855322356342a6b991f895a59915604757dd8c425a09f9acdb1ff81c97fd382d625c9480cd0cd8f39b495740d82448ff98f9354542", 0xd8}, {&(0x7f0000005780)="dd1e4220c5764ed242127c4d6d5ee07af431f12c02631cffffeba81afe4ea3652a38ab1bc94b484afaafd22bb3d8e4e483abf91242f073bd0951746e464da7217eba0c83ea3d7f62fdb74a4e3db1547aa7fe441c884bcf84ef1fc6cb27dbcc913cbc035e633cbaad2a948646ad0777776d8b959644f494a0a261ddca51e4aafd6a3dd0daca8a7465c13a18f1095bcab5df37b631ffacedf7d31ec51130e2b9494ceb733733e19b3c7128cc6f839089a4b3382befc95af84e35f7d66ace6589d6bd7d26cf82e2044d4712df981ff826d5facdde27", 0xd4}], 0x3}], 0x7, 0x40000) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000005b40)={@remote, @multicast2}, &(0x7f0000005b80)=0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 721.158090] binder: undelivered TRANSACTION_ERROR: 29201 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'irlan0\x00', 0x100}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}}, 0x5b) r2 = accept(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r0, 0x8, 0x5, "319d8a6ab6ee3afed288c1ea86c8425feb2448dfe2efc95148bc337265660b20b6c4260f10250f287f7c5cae1fef6831b315b64bd2c03732a773625616b4855c4e0dd2c020f8d7856d3e92b58688b32eed7a903911fd00573ae26cbc358e90a1c96da98c77e319418129357751cdef7de8ab8fd5ffcc08344a318e9388cd7bf14fd020422f2578ec1926d512eb4bf800fc5ea842374625"}) 03:37:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "07fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0xb00000000000000}}}, 0xd8}, 0x1}, 0x0) [ 721.223691] binder: 16700:16704 ERROR: BC_REGISTER_LOOPER called without request 03:37:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x1a00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:37:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x3225fe2c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x800, 0x4, 0x7, 0x9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}, [@nested={0x4, 0x27}]}, 0x18}, 0x1}, 0x0) 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x4000) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x6, 0x2, 0x1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:37:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x1700000000000000}}}, 0xd8}, 0x1}, 0x0) [ 721.480753] netlink: 'syz-executor4': attribute type 39 has an invalid length. [ 721.506338] netlink: 'syz-executor4': attribute type 39 has an invalid length. 03:37:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) r2 = socket$packet(0x11, 0x3, 0x300) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', "79616d300001178b00"}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'tunl0\x00', 0x461}) getsockname(r0, &(0x7f0000000440)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f00000004c0)=0x80) getsockname$inet6(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) [ 722.017736] binder: 16700:16755 BC_FREE_BUFFER u0000000020001000 no match [ 722.024827] binder: 16700:16755 got transaction to context manager from process owning it [ 722.033340] binder: 16700:16755 transaction failed 29201/-22, size 0-0 line 2843 [ 722.150868] binder: undelivered TRANSACTION_ERROR: 29201 03:37:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0xc00}}}, 0xd8}, 0x1}, 0x0) 03:37:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:37:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=""/237, 0xed}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='gretap0\x00', 0xffffffff874fd06e}) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x233, 0x0) 03:37:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r2, 0xf, 0x1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:37:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x11, 0x2, 0xc000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xbbc, 0x7, [0x6, 0xff, 0x1000, 0x101, 0x5, 0x5, 0x5]}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x1d, "9b9997fde491fa5a2a0e27069a9aa54623100afc927ea1b1a8698cfaff"}, &(0x7f00000000c0)=0x25) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) 03:37:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:37:53 executing program 3: mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0xfffffffffffffffb, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="89", 0x1) r1 = dup(r0) ioctl$KDDELIO(r1, 0x4b35, 0x1) 03:37:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$SG_SCSI_RESET(r0, 0x227c, 0x7fffffffefff) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x100) ioctl$TIOCCBRK(r2, 0x5428) 03:37:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x14}}}, 0xd8}, 0x1}, 0x0) [ 722.266123] binder: 16766:16776 ERROR: BC_REGISTER_LOOPER called without request 03:37:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) close(r0) 03:37:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_int(r0, 0x29, 0x10000000000024, &(0x7f0000534000), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:37:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) close(r0) 03:37:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) close(r0) 03:37:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 723.054471] binder: 16766:16820 BC_FREE_BUFFER u0000000020001000 no match [ 723.061635] binder: 16766:16820 got transaction to context manager from process owning it [ 723.070081] binder: 16766:16820 transaction failed 29201/-22, size 0-0 line 2843 [ 723.208659] binder: undelivered TRANSACTION_ERROR: 29201 03:37:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000000000028000007a0a00fffffffffd630148"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x84000001, 0x3342, &(0x7f0000000300)=""/187}, 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) 03:37:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(0xffffffffffffffff) 03:37:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1600000000000000}}}, 0xd8}, 0x1}, 0x0) 03:37:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) 03:37:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x400) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000240), &(0x7f0000000040)) 03:37:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000000000)) 03:37:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xe90d000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:37:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 723.673533] IPVS: ftp: loaded support on port[0] = 21 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "1100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 723.916389] binder: 16834:16836 ERROR: BC_REGISTER_LOOPER called without request 03:37:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x2) fcntl$addseals(r0, 0x409, 0x8) fcntl$addseals(r0, 0x409, 0xf) [ 724.269308] binder: 16834:16878 BC_FREE_BUFFER u0000000020001000 no match [ 724.276546] binder: 16834:16878 got transaction to context manager from process owning it [ 724.285649] binder: 16834:16878 transaction failed 29201/-22, size 0-0 line 2843 03:37:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(0xffffffffffffffff) 03:37:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x5, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r1, 0x9) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001}, 0x8) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x111240) creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040)) setsockopt$inet6_mreq(r1, 0x29, 0x19, &(0x7f0000000080), 0x14) 03:37:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:37:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:37:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000080)=""/251, 0xfb) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x2e) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) [ 724.437573] binder: undelivered TRANSACTION_ERROR: 29201 [ 725.070420] device bridge_slave_1 left promiscuous mode [ 725.076136] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.091891] device bridge_slave_0 left promiscuous mode [ 725.097537] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.188216] team0 (unregistering): Port device team_slave_1 removed [ 727.198616] team0 (unregistering): Port device team_slave_0 removed [ 727.208648] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 727.227771] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 727.255607] bond0 (unregistering): Released all slaves [ 727.625399] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.631856] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.639747] device bridge_slave_0 entered promiscuous mode [ 727.679490] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.685944] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.695195] device bridge_slave_1 entered promiscuous mode [ 727.733505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 727.772997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 727.887946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 727.930653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 728.110681] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 728.119052] team0: Port device team_slave_0 added [ 728.157361] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 728.164857] team0: Port device team_slave_1 added [ 728.205280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 728.247259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 728.288175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 728.295617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.304205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 728.329937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 728.337774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.347187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 728.690382] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.696804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.703488] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.710174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.718326] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 729.311267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.586243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.672520] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 729.756564] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 729.762954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.770771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.849767] 8021q: adding VLAN 0 to HW filter on device team0 03:38:01 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xbb15, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0xb396, 0x8}, 'port0\x00', 0xc1, 0x10000, 0x4, 0x3f, 0x2, 0x80000000, 0x0, 0x0, 0x1, 0xbeb7}) r1 = socket(0xa, 0x0, 0x200000) ioctl(r1, 0x8902, &(0x7f0000000100)="00000080") ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) 03:38:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsync(r0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000308ffff0000000000001d00000000000c00e5b00a020008f200000000000001001f4accea129947fae5825f649959c4f9912aa44882eee9727a077efc3d29b65b031fd9795c825d671208030319ee216f3f1326850acef5685dd7700c15d420489593920787bf18611bc5c4e1917b9dc754209b2b0033f0aee6c41e5d65335d221ecc1135127c04c2eb7bbc14d732dd69dc3344d6c952ab2e9b5c5009505dce57804dbd89c62049bf64f5be247bbfb596270f6d23d85b731d004f7c1ae2b0075e85f3dd0ec46fb804926d4940e96de1970201d49149d54ed5cd4d2b6eccdd06db665de3a3d2541e6cce", @ANYRES32=0x0], 0x20}, 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x101000, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="9941d005ac0f7d856dee38f7f6992dec7f697cc5ef3c746e3112acc80ad139a35f1e5ac2cf9df8654a1d64e2146d0dfac095aa01fd53e9c243da74480364ebfb568742dcd679946db8f8becbfeaf46aba707171812", 0x55, 0xfffffffffffffffc) request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)=',\x00', r2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 03:38:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "8800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8022000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=@newtaction={0x1d4, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1, 0xd0}, [{0xcc, 0x1, @m_vlan={0xc8, 0x20, {{0xc, 0x1, 'vlan\x00'}, {0x1c, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xa8b}]}, {0x98, 0x6, "252b8a8263207b65895a65bc40ce5be36a1b1a7fc5cd4cee904dd10a05e64069b675af8d5bec137e8cf49cc818a14626c4b661280aee2861532663b58e62ca7de7b6daf446a8c241e64ee85fa5b96b18cc4262b5ea43038e20d14739f75907c2b4cd82ba324a9894501e736b191fac046f2415f6e4a2ee5229e0b778d1a8fe0fc4a52da7fa094914144023cd02aba743fd78a1"}}}}, {0xf4, 0x1, @m_simple={0xf0, 0xb, {{0xc, 0x1, 'simple\x00'}, {0x58, 0x2, [@TCA_DEF_DATA={0xc, 0x3, ':(eth1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0x100000001, 0x20000000, 0x9, 0x81d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f0000000000, 0x7, 0xffffffffffffffff, 0x8, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'C\x00'}, @TCA_DEF_DATA={0x10, 0x3, '(trusted\x00'}]}, {0x84, 0x6, "34a9c500c8c4aa1c892fa6b7c285e556651e744cc3725823b8639211f38c2219a2577f35dafc1b3e25948f102cc3365e7a1e4999a733856f4e5f21a22d9abc1324e68f47c7af2a27de99c84222174e15662e80b7abaca03479fb5279f7b47115ed63a276e7d17efd90a8e4da768b794dd1d3b9b399d954f4827268de312541de"}}}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x1, 0x200, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/74) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)=':(eth1\x00') 03:38:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40019b1b142d3dd9aa9de80c580314000010001307000000000000000000000000000000000000000000000000000000000017000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008000b0000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x140}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:38:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x12000000}}}, 0xd8}, 0x1}, 0x0) 03:38:01 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(0xffffffffffffffff) 03:38:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 730.383781] binder: 17160:17161 ERROR: BC_REGISTER_LOOPER called without request 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x1) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)}) 03:38:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002c003505000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00400000000000000002001ab2422ec308a41508c1d690bf745885d1b811d3c389eba1cef33977b62fecfc0dbb27c18d6a1fda2a9b18cd09f801cd8969eb9f9fa0e4bedbeefd4679a9388c4ec46e41d0814ae0c8192c6fe5f56d2f7a58afa06a56d1cb88"], 0x24}, 0x1}, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14) 03:38:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() r3 = fcntl$dupfd(r1, 0x0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x2c, &(0x7f0000000100)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@current, @random='h#`F|t'}}}}}, &(0x7f0000000040)) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 03:38:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb4000000}}}, 0xd8}, 0x1}, 0x0) 03:38:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000180)={0x8000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, 0x0, 0x0, r0, 0x0) sync() 03:38:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r1, 0x4) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000000340)=""/192, 0xc0}], 0x4, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) inotify_init() r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) accept$ipx(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x11}}}, 0xd8}, 0x1}, 0x0) 03:38:02 executing program 3: setitimer(0x2, &(0x7f0000000fe0)={{0x100000000000}, {0x0, 0x2710}}, &(0x7f0000000440)) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1, 0x100) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x7, 0x7, 0x4, 0xa1, &(0x7f00000001c0)=""/161, 0x9f, &(0x7f0000000280)=""/159, 0xba, &(0x7f0000000340)=""/186}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x2040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r1, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000, r2}) [ 731.176978] binder: 17160:17218 BC_FREE_BUFFER u0000000020001000 no match [ 731.184131] binder: 17160:17218 got transaction to context manager from process owning it [ 731.192583] binder: 17160:17218 transaction failed 29201/-22, size 0-0 line 2843 03:38:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_mount_image$xfs(&(0x7f0000003600)='xfs\x00', &(0x7f0000004740)='./file0\x00', 0x0, 0x0, &(0x7f0000006b40), 0x0, &(0x7f0000006c00)=@wsync='wsync') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x0, 0x3ff}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) 03:38:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1a}}}, 0xd8}, 0x1}, 0x0) 03:38:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x1ff, 0x4000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x3, 0xfff}, 0x8) 03:38:02 executing program 7 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 731.313382] binder: undelivered TRANSACTION_ERROR: 29201 03:38:02 executing program 3: r0 = socket$inet6(0xa, 0x9, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="01df9dfeca3e4a66fa10d4b994da0ff31d5102902133b2e40dcd6be19bf3c2cf1724da2af35e4aa241b08e6f566dd18cd13d7ce4a0fbde4eeb175e53533d1f4e61fde71d07b224c9e94d4029195e63991675941708381967a1f0b7a2519f17aa4cadfd1453d04ee3fc1c0bd945eddf5985aab711fdea0839c8", 0x79, r1) r4 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a}, &(0x7f0000000840)="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", 0x179, r2) r5 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) r6 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x4, 0x400) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x601}, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r5}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x122) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000140)) [ 731.397959] binder: 17238:17241 ERROR: BC_REGISTER_LOOPER called without request [ 731.414876] FAULT_INJECTION: forcing a failure. [ 731.414876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.426977] CPU: 0 PID: 17242 Comm: syz-executor7 Not tainted 4.17.0+ #105 [ 731.434050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.443437] Call Trace: 03:38:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:02 executing program 5: socket$inet(0x10, 0x80002, 0x0) 03:38:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xd00}}}, 0xd8}, 0x1}, 0x0) [ 731.446059] dump_stack+0x1c9/0x2b4 [ 731.449728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 731.454977] should_fail.cold.4+0xa/0x1a [ 731.459065] ? perf_swevent_event+0x158/0x2e0 [ 731.463605] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 731.468769] ? perf_tp_event+0x91b/0xc40 [ 731.472957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 731.478550] ? tracing_generic_entry_update+0x18e/0x200 [ 731.483957] ? perf_swevent_event+0x2e0/0x2e0 [ 731.488512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 731.494089] ? tracing_generic_entry_update+0x18e/0x200 [ 731.499496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.505106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.510698] ? perf_tp_event+0x91b/0xc40 [ 731.514826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 731.520403] ? tracing_generic_entry_update+0x18e/0x200 [ 731.525803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.531378] ? perf_swevent_event+0x158/0x2e0 [ 731.535918] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.541501] __alloc_pages_nodemask+0x36e/0xdb0 [ 731.546222] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 731.551275] ? print_usage_bug+0xc0/0xc0 [ 731.555376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.560962] ? perf_tp_event+0x91b/0xc40 [ 731.565067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 731.570658] ? perf_swevent_event+0x158/0x2e0 [ 731.575212] ? __lock_acquire+0x7fc/0x5020 [ 731.579511] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 731.585094] alloc_pages_vma+0x3a0/0x540 [ 731.589552] do_huge_pmd_anonymous_page+0x61c/0x1b60 [ 731.594776] ? perf_tp_event+0xc40/0xc40 [ 731.598884] ? __thp_get_unmapped_area+0x180/0x180 [ 731.603845] ? memset+0x31/0x40 [ 731.607171] ? perf_trace_lock+0x49d/0x920 [ 731.611445] ? pud_val+0x88/0x100 [ 731.614960] ? pmd_val+0x100/0x100 [ 731.618536] __handle_mm_fault+0x2d6b/0x4460 [ 731.622978] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 731.627866] ? graph_lock+0x170/0x170 [ 731.638029] ? __lock_acquire+0x7fc/0x5020 [ 731.642310] ? lock_downgrade+0x8f0/0x8f0 03:38:03 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x44280, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) recvmmsg(r2, &(0x7f0000004640)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/171, 0xab}}], 0x1, 0x40, &(0x7f00000048c0)={0x0, 0x989680}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/26}) 03:38:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1500000000000000}}}, 0xd8}, 0x1}, 0x0) [ 731.646491] ? rcu_is_watching+0x8c/0x150 [ 731.650657] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 731.655086] ? handle_mm_fault+0x8c4/0xc80 [ 731.659354] handle_mm_fault+0x53e/0xc80 [ 731.663443] ? __handle_mm_fault+0x4460/0x4460 [ 731.668043] ? check_same_owner+0x340/0x340 [ 731.672392] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 731.677441] __get_user_pages+0x823/0x1ad0 [ 731.681763] ? follow_page_mask+0x1d90/0x1d90 [ 731.686276] ? graph_lock+0x170/0x170 [ 731.690112] ? lock_acquire+0x1e4/0x540 [ 731.694113] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 731.699243] ? kasan_check_write+0x14/0x20 [ 731.703510] ? lock_release+0xa30/0xa30 [ 731.707501] ? check_same_owner+0x340/0x340 [ 731.711839] ? wait_for_completion+0x8d0/0x8d0 [ 731.716446] ? rcu_note_context_switch+0x730/0x730 [ 731.721404] ? down_read+0xb5/0x1d0 [ 731.725048] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 731.730180] get_user_pages_remote+0x21a/0x440 [ 731.734794] process_vm_rw_core.isra.2+0x467/0xdf0 [ 731.739776] ? alloc_vmap_area.cold.44+0x24/0x24 [ 731.744558] ? lock_release+0xa30/0xa30 [ 731.748636] ? check_same_owner+0x340/0x340 [ 731.752977] ? __check_object_size+0x9d/0x5f2 [ 731.757516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 731.763069] ? _copy_from_user+0xdf/0x150 [ 731.767239] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 731.772271] ? rw_copy_check_uvector+0x30d/0x3e0 [ 731.777048] ? proc_fail_nth_write+0x9e/0x210 [ 731.781581] process_vm_rw+0x300/0x360 [ 731.785502] ? process_vm_rw_core.isra.2+0xdf0/0xdf0 [ 731.790632] ? kasan_check_write+0x14/0x20 [ 731.794894] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 731.799858] ? wait_for_completion+0x8d0/0x8d0 [ 731.804503] ? __sb_end_write+0xac/0xe0 [ 731.808505] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 731.814062] ? fput+0x130/0x1a0 [ 731.817360] ? ksys_write+0x1ae/0x260 [ 731.821182] ? __ia32_sys_read+0xb0/0xb0 [ 731.825617] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 731.830654] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 731.835686] do_syscall_64+0x1b9/0x820 [ 731.839585] ? syscall_slow_exit_work+0x500/0x500 [ 731.844448] ? syscall_return_slowpath+0x5e0/0x5e0 [ 731.849396] ? syscall_return_slowpath+0x31d/0x5e0 [ 731.854363] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 731.859765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 731.864642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 731.869845] RIP: 0033:0x455b29 [ 731.873053] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 731.892741] RSP: 002b:00007f51ec991c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 03:38:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10100, 0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x2) bind$alg(r2, &(0x7f0000005cc0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) dup2(r0, r2) dup2(r1, r4) 03:38:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x500}}}, 0xd8}, 0x1}, 0x0) 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) [ 731.900490] RAX: ffffffffffffffda RBX: 00007f51ec9926d4 RCX: 0000000000455b29 [ 731.907786] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000000c38 [ 731.915084] RBP: 000000000072bea0 R08: 0000000000000001 R09: 0000000000000000 [ 731.922375] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000015 [ 731.929657] R13: 00000000004c06b1 R14: 00000000004cfc88 R15: 0000000000000000 [ 731.941680] XFS (loop4): Invalid superblock magic number [ 732.046674] XFS (loop4): Invalid superblock magic number [ 732.179240] binder: 17238:17304 BC_FREE_BUFFER u0000000020001000 no match [ 732.191357] binder: 17238:17304 got transaction to context manager from process owning it [ 732.199886] binder: 17238:17304 transaction failed 29201/-22, size 0-0 line 2843 03:38:03 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1100}}}, 0xd8}, 0x1}, 0x0) 03:38:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast=0xffffffff, @in6=@dev={0xfe, 0x80, [], 0x16}, 0x4e21, 0x0, 0x4e22, 0x10001, 0x2, 0x20, 0xa0, 0x0, r1, r2}, {0x3f, 0xfffffffffffffffc, 0x1, 0x8, 0xffffffffffff89f2, 0x7f, 0x2099, 0x1}, {0x4, 0x1, 0xf0, 0x8}, 0x9, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in=@multicast1=0xe0000001, 0x4d3, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3501, 0x7, 0x3, 0x3, 0xca, 0x974, 0x2}}, 0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = dup2(r0, r0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x10000, 0x9, 0x7fe000000000}, 0xc) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000140)="f4001100052b2c25e994efd18498d6623abaa68754a30000000002000000000000000000000000000600000000000000", 0x30}], 0x1}, 0x0) 03:38:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000003900)}}], 0x2, 0x0) 03:38:03 executing program 7 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:03 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x400) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x12, 0xd, &(0x7f0000000100)="c65384962c808031afe4989f99"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$unix(0x1, 0x7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000932000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) msgget$private(0x0, 0x0) [ 732.320012] binder: undelivered TRANSACTION_ERROR: 29201 [ 732.375368] binder: 17313:17320 ERROR: BC_REGISTER_LOOPER called without request [ 732.387731] FAULT_INJECTION: forcing a failure. [ 732.387731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 732.399828] CPU: 0 PID: 17333 Comm: syz-executor7 Not tainted 4.17.0+ #105 [ 732.406891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.416274] Call Trace: [ 732.418890] dump_stack+0x1c9/0x2b4 03:38:03 executing program 4: r0 = socket(0x10, 0x802, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) write(r0, &(0x7f000052a000)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc0800090001000000", 0x24) 03:38:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 732.422578] ? dump_stack_print_info.cold.2+0x52/0x52 [ 732.427807] ? zap_class+0x740/0x740 [ 732.431564] should_fail.cold.4+0xa/0x1a [ 732.435663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 732.440798] ? graph_lock+0x170/0x170 [ 732.444633] ? find_held_lock+0x36/0x1c0 [ 732.448733] ? find_held_lock+0x36/0x1c0 [ 732.452830] ? __lock_is_held+0xb5/0x140 [ 732.456940] ? check_same_owner+0x340/0x340 [ 732.461302] ? rcu_note_context_switch+0x730/0x730 [ 732.466291] __alloc_pages_nodemask+0x36e/0xdb0 [ 732.470988] ? percpu_ref_tryget+0x2d0/0x2d0 03:38:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x980, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7fff, 0x5, [0x401, 0x5d, 0x15e412f8, 0x5, 0x8000]}, &(0x7f0000000140)=0x12) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0xb67, 0x101, 0x8}, &(0x7f00000001c0)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty, r1}, 0x14) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x14) 03:38:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xd00000000000000}}}, 0xd8}, 0x1}, 0x0) [ 732.475416] ? __alloc_pages_nodemask+0xb10/0xdb0 [ 732.480282] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 732.485336] ? mem_cgroup_try_charge+0x548/0xa70 [ 732.490143] ? mem_cgroup_protected+0xa60/0xa60 [ 732.494876] ? __lock_acquire+0x7fc/0x5020 [ 732.499156] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 732.504734] alloc_pages_current+0x10c/0x210 [ 732.509184] pte_alloc_one+0x1b/0x1a0 [ 732.513023] do_huge_pmd_anonymous_page+0x8be/0x1b60 [ 732.518155] ? perf_tp_event+0xc40/0xc40 [ 732.522384] ? __thp_get_unmapped_area+0x180/0x180 [ 732.527344] ? memset+0x31/0x40 [ 732.530679] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 732.535559] ? pud_val+0x88/0x100 [ 732.539043] ? pmd_val+0x100/0x100 [ 732.542637] __handle_mm_fault+0x2d6b/0x4460 [ 732.547097] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 732.551962] ? graph_lock+0x170/0x170 [ 732.555818] ? lock_downgrade+0x8f0/0x8f0 [ 732.560000] ? rcu_is_watching+0x8c/0x150 [ 732.564166] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 732.568596] ? handle_mm_fault+0x8c4/0xc80 [ 732.572867] handle_mm_fault+0x53e/0xc80 [ 732.576961] ? __handle_mm_fault+0x4460/0x4460 [ 732.581565] ? check_same_owner+0x340/0x340 [ 732.585915] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 732.590962] __get_user_pages+0x823/0x1ad0 [ 732.595245] ? follow_page_mask+0x1d90/0x1d90 [ 732.599769] ? graph_lock+0x170/0x170 [ 732.603608] ? lock_acquire+0x1e4/0x540 [ 732.607608] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 732.612750] ? lock_release+0xa30/0xa30 [ 732.616747] ? wait_for_completion+0x8d0/0x8d0 [ 732.621357] ? rcu_note_context_switch+0x730/0x730 [ 732.626331] ? down_read+0xb5/0x1d0 [ 732.629980] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 732.635119] get_user_pages_remote+0x21a/0x440 [ 732.639743] process_vm_rw_core.isra.2+0x467/0xdf0 [ 732.644734] ? alloc_vmap_area.cold.44+0x24/0x24 [ 732.649515] ? lock_release+0xa30/0xa30 [ 732.653512] ? __check_object_size+0x9d/0x5f2 [ 732.658052] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 732.663610] ? _copy_from_user+0xdf/0x150 [ 732.667783] ? __sanitizer_cov_trace_cmp8+0x18/0x20 03:38:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x8010000000000081) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000280)=""/15, 0xf}], 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, &(0x7f00000002c0)=0x98) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000400)) 03:38:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000000000000000000000dec600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000deb02b83d3efcec972e7303a0b98dbcd744a921f9ca5e4b67c338f5b66"], 0x80}, 0x1}, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x3, 0x0, 0x81}) 03:38:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='cpuset#+\x00', 0x1) ioctl$sock_bt_hci(r1, 0x400448ed, &(0x7f00000000c0)="c4ffaae0ec5651ec35e93bebf66fcd4c7bdb6e44099338e52d9993a858fb7459ee5aa459f730edc3567252c8fb391e1a594974802c08aadab908bae901d6ffc1d2e07b97313b3d7f1c334c8a38b16c911d91c6b42d3a615f1c054dbf2e976fbc2adc5be80dc8df3a76f26b8312c5876108668d145634d2e76d8bf547a9809961e0628f4512663615c2a8220eb80d30d714aaae0dfc424ebc308f27688c43bb2a501f9f") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) [ 732.672813] ? rw_copy_check_uvector+0x30d/0x3e0 [ 732.677591] ? proc_fail_nth_write+0x9e/0x210 [ 732.682119] process_vm_rw+0x300/0x360 [ 732.686036] ? process_vm_rw_core.isra.2+0xdf0/0xdf0 [ 732.691168] ? kasan_check_write+0x14/0x20 [ 732.695423] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 732.700387] ? wait_for_completion+0x8d0/0x8d0 [ 732.705026] ? __sb_end_write+0xac/0xe0 [ 732.709036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 732.714592] ? fput+0x130/0x1a0 [ 732.717985] ? ksys_write+0x1ae/0x260 [ 732.721807] ? __ia32_sys_read+0xb0/0xb0 [ 732.725912] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 732.730954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 732.736005] do_syscall_64+0x1b9/0x820 [ 732.739924] ? finish_task_switch+0x1d3/0x890 [ 732.744458] ? syscall_return_slowpath+0x5e0/0x5e0 [ 732.749875] ? syscall_return_slowpath+0x31d/0x5e0 [ 732.754845] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 732.760258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.765318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 732.770530] RIP: 0033:0x455b29 [ 732.773730] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 732.793454] RSP: 002b:00007f51ec991c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 732.801199] RAX: ffffffffffffffda RBX: 00007f51ec9926d4 RCX: 0000000000455b29 [ 732.808529] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000000c3b [ 732.815829] RBP: 000000000072bea0 R08: 0000000000000001 R09: 0000000000000000 [ 732.823133] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000015 [ 732.830432] R13: 00000000004c06b1 R14: 00000000004cfc88 R15: 0000000000000001 [ 733.154087] binder: 17313:17379 BC_FREE_BUFFER u0000000020001000 no match [ 733.161177] binder: 17313:17379 got transaction to context manager from process owning it [ 733.169561] binder: 17313:17379 transaction failed 29201/-22, size 0-0 line 2843 03:38:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x300000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:04 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='^GPL{vmnet1#\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f0000000380)="002fb4e5878d1bbd7a33882e0147df80e95b1e3b80c03149893834fd8a776a0fcb31037ec38d83a720b085a51275653f57770dd38336c7b5c6e9087388f5b68b363032ecb8166958f83e2d0979", 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '\x00'}, &(0x7f0000000100)=""/5, 0x5) 03:38:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000080), 0xe) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x2000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x4) 03:38:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) r1 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 03:38:04 executing program 7 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, r2) ioctl$LOOP_SET_STATUS64(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) [ 733.288416] binder: undelivered TRANSACTION_ERROR: 29201 [ 733.338758] FAULT_INJECTION: forcing a failure. [ 733.338758] name failslab, interval 1, probability 0, space 0, times 0 [ 733.350457] CPU: 0 PID: 17394 Comm: syz-executor7 Not tainted 4.17.0+ #105 [ 733.357507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.366888] Call Trace: [ 733.369498] dump_stack+0x1c9/0x2b4 [ 733.373154] ? dump_stack_print_info.cold.2+0x52/0x52 [ 733.378389] should_fail.cold.4+0xa/0x1a [ 733.382482] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 733.387613] ? graph_lock+0x170/0x170 [ 733.391452] ? find_held_lock+0x36/0x1c0 [ 733.395520] ? __lock_is_held+0xb5/0x140 [ 733.399750] ? ext4_getfsmap+0x4c0/0xd70 [ 733.403828] ? check_same_owner+0x340/0x340 [ 733.408145] ? rcu_note_context_switch+0x730/0x730 [ 733.413080] __should_failslab+0x124/0x180 [ 733.417312] should_failslab+0x9/0x14 [ 733.421107] kmem_cache_alloc+0x2af/0x760 [ 733.425266] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 733.430804] ptlock_alloc+0x20/0x80 [ 733.434428] pte_alloc_one+0x6b/0x1a0 [ 733.438235] do_huge_pmd_anonymous_page+0x8be/0x1b60 [ 733.443330] ? perf_tp_event+0xc40/0xc40 [ 733.447404] ? __thp_get_unmapped_area+0x180/0x180 [ 733.452333] ? memset+0x31/0x40 [ 733.455632] ? pud_val+0x88/0x100 [ 733.459078] ? pmd_val+0x100/0x100 [ 733.462622] __handle_mm_fault+0x2d6b/0x4460 [ 733.467041] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 733.471878] ? graph_lock+0x170/0x170 [ 733.475669] ? __lock_acquire+0x7fc/0x5020 [ 733.479925] ? lock_downgrade+0x8f0/0x8f0 [ 733.484081] ? rcu_is_watching+0x8c/0x150 [ 733.488222] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 733.492625] ? handle_mm_fault+0x8c4/0xc80 [ 733.496861] handle_mm_fault+0x53e/0xc80 [ 733.500918] ? __handle_mm_fault+0x4460/0x4460 [ 733.505502] ? check_same_owner+0x340/0x340 [ 733.509823] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 733.514845] __get_user_pages+0x823/0x1ad0 [ 733.519093] ? follow_page_mask+0x1d90/0x1d90 [ 733.523583] ? graph_lock+0x170/0x170 [ 733.527386] ? lock_acquire+0x1e4/0x540 [ 733.531352] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 733.536448] ? kasan_check_write+0x14/0x20 [ 733.540678] ? lock_release+0xa30/0xa30 [ 733.544654] ? check_same_owner+0x340/0x340 [ 733.548970] ? wait_for_completion+0x8d0/0x8d0 [ 733.553555] ? rcu_note_context_switch+0x730/0x730 [ 733.558497] ? down_read+0xb5/0x1d0 [ 733.562113] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 733.567213] get_user_pages_remote+0x21a/0x440 [ 733.571799] process_vm_rw_core.isra.2+0x467/0xdf0 [ 733.576742] ? alloc_vmap_area.cold.44+0x24/0x24 [ 733.581488] ? lock_release+0xa30/0xa30 [ 733.585452] ? check_same_owner+0x340/0x340 [ 733.589775] ? __check_object_size+0x9d/0x5f2 [ 733.594281] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 733.599812] ? _copy_from_user+0xdf/0x150 [ 733.603974] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 733.608980] ? rw_copy_check_uvector+0x30d/0x3e0 [ 733.613730] ? proc_fail_nth_write+0x9e/0x210 [ 733.618231] process_vm_rw+0x300/0x360 [ 733.622114] ? process_vm_rw_core.isra.2+0xdf0/0xdf0 [ 733.627213] ? kasan_check_write+0x14/0x20 [ 733.631448] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 733.636635] ? wait_for_completion+0x8d0/0x8d0 [ 733.641236] ? __sb_end_write+0xac/0xe0 [ 733.645204] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 733.650729] ? fput+0x130/0x1a0 [ 733.654000] ? ksys_write+0x1ae/0x260 [ 733.657802] ? __ia32_sys_read+0xb0/0xb0 [ 733.661866] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 733.666894] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 733.671907] do_syscall_64+0x1b9/0x820 [ 733.675783] ? finish_task_switch+0x1d3/0x890 [ 733.680268] ? syscall_return_slowpath+0x5e0/0x5e0 [ 733.685211] ? syscall_return_slowpath+0x31d/0x5e0 [ 733.690140] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 733.695503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.700344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 733.705522] RIP: 0033:0x455b29 [ 733.708697] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 733.728152] RSP: 002b:00007f51ec991c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 03:38:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl(r0, 0x8, &(0x7f0000000000)="0047fc2f07d82c99240970") socket$inet(0x2, 0x1, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x7c, "c7193a82fb92275acc7e4f4dbeaad940a7409654c52dfb9b08f5295c7de2c9cf1bd32f5523f2cf2cc4b0e43dee4217125b3d52a4a7341f008d1b5e35e2066e20b1316ff6242bfb786f6c4fc263fa9ec4e938c9054c0b3339ec4aa652ff478fd584e56ab32ba1fdf4d0bb6efb8589b6444cffa7eeda2b4aac5d3446e7"}, &(0x7f0000000200)=0xa0) ioctl$sock_netrom_TIOCINQ(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) inotify_init() 03:38:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)="be8f0e9e1cdd54e6954d73106fb7c992c2ae3a54b37183edfcf94f4a6b75bec0a4c0785f76b82602bd784f5f38a10372843e677cd9c3e7a6812e05af2a44ce883cdf41f982ee2db2b99ce83e2bddc0cf7863d7309c384381b364944a0b79a34ea643fb665811c42cbbcbd25b639f293e") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x12) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e22, @multicast1=0xe0000001}, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x4, 0x2, 0x200, 0x80, 0x2, &(0x7f0000000100)='bpq0\x00', 0x3f, 0x8, 0x3}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x5, 0x8207, 0x80000001, 0x80000001, 0x7, 0x1, 0xffffffffffffff00, r2}, 0x20) [ 733.735867] RAX: ffffffffffffffda RBX: 00007f51ec9926d4 RCX: 0000000000455b29 [ 733.743737] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000000c3d [ 733.751004] RBP: 000000000072bea0 R08: 0000000000000001 R09: 0000000000000000 [ 733.758276] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000015 [ 733.765535] R13: 00000000004c06b1 R14: 00000000004cfc88 R15: 0000000000000002 03:38:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1500}}}, 0xd8}, 0x1}, 0x0) 03:38:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 03:38:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80004, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) [ 733.797479] binder: 17386:17401 ERROR: BC_REGISTER_LOOPER called without request 03:38:05 executing program 7 (fault-call:5 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:05 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xc}}}, 0xd8}, 0x1}, 0x0) 03:38:05 executing program 1: io_setup(0x1000, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:05 executing program 3: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)="55411d58c3d169aff91caf57", 0xc, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x204c0, 0x0) connect$ipx(r1, &(0x7f0000000080)={0x4, 0x10001, 0x8000, "16a689bb19b0", 0x3}, 0x10) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x4, 0xfffffffffffffffd}) 03:38:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0xc8, 0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[{0x2, 0x8}, {0x0, 0xafee}, {0x2, 0x2}, {0x2, 0x800}, {0x8, 0xffffffff}, {0x2, 0x6}], 0x6) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000200)={'gretap0\x00', @ifru_flags=0x4000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r3, 0xfffffffffffffffa, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r3, r4, &(0x7f0000000340)=0x400000000, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x80080) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendfile(r2, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:38:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x5, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="9a", &(0x7f0000000140)=""/209}, 0x18) pipe(&(0x7f0000000080)) 03:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1200000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:05 executing program 3: mknod$loop(&(0x7f0000000280)='./file0\x00', 0x40, 0x1) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='\\trusted+posix_acl_access/keyring\x00', 0x22, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000240)='\\trusted+posix_acl_access/keyring\x00', 0x22, 0x0) 03:38:05 executing program 4: r0 = socket$inet(0x2, 0x80000000080006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2040}, {r0, 0xb020}, {r0}], 0x3, 0x8000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x1) write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x0, 0x8000, 0x7, 0x3, 0x80000000}, @ipx={0xffff, 0xbb, 0x7, 0x14, {@broadcast=0xffffffff, @current, 0x3}, {@random=0x100000001, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x7}, "f2998c811c19b3aa43df1510b50326bb366acdc2494d831cdc633fbb3bbeaea5457d3bbe92a977395159cedb9d20f8276f21529a0d61006c4add2f4bd2bbf50dcd334d1679fc1803b3a8d502c5511ff49ff57393786b7e7dda65e09885280807230a611834ba598a93ebda8001f6174f1e57e1d5e964e6c0356be03b87db1a7aac82593992f38d364894986de89d44a775d4ff6039999ba3fa2dac50ac"}}, 0xc5) write$tun(r1, &(0x7f0000000280)={@void, @void, @ipv6={0xffffffff, 0x6, "ee83d7", 0x10d0, 0x2b, 0x2, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, {[@hopopts={0x2c, 0x0, [], [@ra={0x5, 0x2, 0x400}]}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x66}, @hopopts={0x33, 0x201, [], [@jumbo={0xc2, 0x4, 0x4}, @generic={0x0, 0x1000, "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"}]}, @srh={0x7f, 0xe, 0x4, 0x7, 0x4, 0xe7f, 0x3, [@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @dev={0xfe, 0x80, [], 0x17}, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}]}, @routing={0xff, 0x2, 0x1, 0x0, 0x0, [@empty]}], @icmpv6=@mld={0x87, 0x0, 0x0, 0x6, 0x9, @local={0xfe, 0x80, [], 0xaa}}}}}, 0x10f8) 03:38:05 executing program 1: r0 = getpgid(0xffffffffffffffff) getpgrp(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000090000000500000010070000e804000010010000ffffffff10010000600200004006000040060000ffffffff400600004006000005000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000001000000fe8000000000000000000000000000aaac1414bb0000000000000000000000004e220064fe80000000000000000000000000000bfe8000000000000000000000000000aa00000000ffffff00ffffffffff000000ff0000ffff0000ffffffffffffffffff62637366300000000000000000000000726f7365300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000007f00000041000000000000000000000000000000280150010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d6000004d581000000010100003000616800000000000000000000000000000000000000000000000000000000000004d3000004d6ff070000000200002800434c415353494659000000000000000000000000000000000000000000003f00000000000000fe8000000000000000000000000000bb00000000000000000000ffffe0000002ffffffff0000000000000000ff000000ffffff0000000000ffffff00ff0000006772653000000000000000000000000065727370616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0001024300000000000000000000000000000040028802000000000000000000000000000000000000000000000000280069707636686561646572000000000000000000000000000000000000000020040100000000005001686173686c696d69740000000000000000000000000000000000000000027663616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000030000000900000003000000803800000100000001000000480052454449524543540000000000000000000000000000000000000000000005000000e0000002000000000000000000000000ac1414bb0000000000000000000000004e24070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100158010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000040000000401010004003b00ff0fff0f04000600030004000700070008000900010000000100030048004e45544d41500000000000000000000000000000000000000000000000000a00000000000000000000000000000000000001ac1414150000000000000000000000004e2186ae0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x770) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@empty, r2}, 0xfffffffffffffda5) [ 734.398757] binder: 17460:17461 ERROR: BC_REGISTER_LOOPER called without request [ 734.421105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:38:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1d00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:05 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ec0)=@hci={0x0, 0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000f40)=""/118, 0x76}], 0x1, &(0x7f0000000fc0)=""/71, 0x47, 0x791}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001080)=@deltfilter={0x3dc, 0x2d, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, r1, {0x6, 0xfff3}, {0x4, 0xfff7}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x80}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1f903}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x368, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_SEL={0x354, 0x5, {0xc, 0x0, 0x1000, 0xa00000000, 0x0, 0x5, 0xc465, 0xe1, [{0xffff, 0x2, 0x0, 0x6}, {0x5, 0x20, 0x4, 0x800}, {0x5, 0x40, 0xffffffff80000001, 0xba1}, {0x4, 0x10000, 0x8, 0x8}, {0x100000001}, {0x1000, 0x100, 0x7, 0x6f}, {0x83a4, 0x5, 0x9, 0x2}, {0x3, 0x2, 0x1, 0xa8}, {0x9, 0xb0e, 0xffffffffffffffc0, 0x100000000}, {0x6, 0x3, 0x0, 0x4}, {0x7, 0x2, 0x6, 0x4}, {0xd4bb, 0x3, 0x0, 0x4}, {0x7, 0x4, 0x3, 0x7}, {0x7, 0x5, 0x4, 0x3d8}, {0x6, 0x1ff, 0xfab, 0x70}, {0x40, 0x7f22, 0x1, 0xf34d}, {0xffffffff, 0x5, 0x7fffffff, 0xfff}, {0x1, 0xfffffffffffff801, 0x7a2, 0xffffffff}, {0x7fff, 0xdabe, 0x80000001, 0x8}, {0xffffffffffffff80, 0x335000000000000, 0x20, 0x7ff}, {0x2, 0x1, 0x7fff, 0xfffffffffffffffd}, {0x3, 0x6, 0x0, 0x3}, {0x9, 0x100000000, 0x2, 0x412d}, {0x7, 0x7f, 0x80}, {0x9, 0x4, 0x9, 0x7}, {0x8, 0x3f4, 0x7, 0x1}, {0xa71, 0x1, 0x3, 0x3}, {0x2, 0x1, 0xfff, 0x1000}, {0x401, 0x20, 0xfffffffffffffffe, 0x6}, {0x7, 0x3, 0xffffffff, 0x4a2}, {0x62, 0xffffffffffff4a90, 0xfffffffffffffffe, 0x5}, {0x0, 0x3f, 0xffffffff, 0x2}, {0x10000, 0x6, 0x1, 0xffffffff}, {0x1ff, 0x67c, 0x100000001, 0xff}, {0x0, 0x7, 0x1, 0x8}, {0x401, 0x6, 0x5, 0x40000000000000}, {0xba2, 0x6, 0x1, 0x7}, {0x6, 0x9, 0x4, 0x800}, {0x8001, 0x5, 0x2ec, 0xffff}, {0xfff, 0x9, 0x5, 0x7}, {0x8, 0x5, 0x2, 0x400}, {0x6, 0xd2af, 0x80b6, 0x9}, {0x400, 0x8d5, 0xffffffffffffff3f, 0x6}, {0x8001, 0x40, 0x3, 0x6}, {0x101, 0x101, 0x6, 0xffffffff}, {0x7, 0x7, 0x13, 0xfffffffffffffeff}, {0x1875, 0x3f, 0x5, 0x100}, {0x0, 0x5, 0x7, 0x100}, {0x8, 0x78, 0x8, 0x4}, {0xd84f, 0x100000001, 0x9d6, 0x7fffffff}, {0x80000001, 0xed}, {0x2, 0xfffffffffffffbff, 0x1000, 0x100000001}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000}]}}, @TCA_RATE={0x8, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x8, 0x5}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x8000) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000200)=0xe8) syz_mount_image$nfs(&(0x7f0000000600)='nfs\x00', &(0x7f0000000640)='./file0\x00', 0x20, 0x8, &(0x7f0000000b80)=[{&(0x7f0000000680)="b67e71ad42d8f96747dd39e0395c2fbc6516f7d5eee03f645c391cb19b2e966d785c75f42d71e9dbc08fad0d2b1856b68bb96d80d245a316438402a4", 0x3c, 0x2}, {&(0x7f00000006c0)="bb479558674184afac7ca560583ddb5a4e02ef81401428685a87117ef5ebb54c73ab65230796255a6003b30650962627af2296985b18b948ead03519de320dfbde75278c937ad5f0651b5cc2c1cb144e2658a590e01f71c02df99bc96f47799aa9a70d5ef3c67740f4b3df7f784bf34b5faa0bd3ce339a5706267ae21562d6253f6226807a6003788f20f21b5aa77c6b764b1b8dce0eeb6f92d4dd30b7499916f62a557e55365feec124350c", 0xac, 0x1}, {&(0x7f0000000780)="4e0c095b18453fb0b7cad3fcbb2543bca4249fa9fb7cef651e57d5c1fd283ab9bc0cd4b7f0fd8639af6a67642eb05fdb5edf83281cac619e4453c2bcab72aaa38ef71097cfe771ef8000e1287154b2dfba59a614596cc91d404a787d409d10a65a7c1fbeabcb44009c16813046df53e668034da33d9af661609e3ba227a5adc3e8ef63d021e4ed4ab52120efca31e2c7c2b6a405fa28cb715eb43279af6d009dec2d408c5268943b0e2dd24ec75d57401601240f65d961ff7ff36acfca46c92615da9eec7a9e4b1b240bee626eea025f082ecfe819c2da10cfaa49a5eb2d5a35cfb99a7dada1a37d9daa", 0xea, 0x7f}, {&(0x7f0000000880)="61772ed7071a6ebd76917468912e21eeab62229cd83a2a2cb99a92acb3a42069712f30110f67cf4f8e8237d952ddaf9048453ad18fd4f16ea5b2f3ffe8597133800827ded25d319261e9b13183c679252d8b87c8d131e5fa9c2fd73df1414857220da9f5fb82b74c2907cfc1864297e9284f9b9793767491872ffbb24a527e53e4679ce5ab7d5cccd3e7463db542c7a868a9dc594c9290f60cb4fe9c99da34d1cb245fcff119630bd7aca838b2b50d65cce78afccca817e8f037266bb496f5546ec43bfee53a9b676aada8155f47c157164d78c060727e75de201b3df12f491d71c446daa1fe2175a1148a1d0c99f86346893004921029ad", 0xf8, 0x1f}, {&(0x7f0000000980)="34706d13bd003f5e75040dbc2579267a17d3385bd0a3e3dd04f02b1d109f8c14b522a31750b8baa378ade6f156bf77ee9d0b863637894ae5b265a7773c785d2af14cbec9f281f04c16221d694a04e73f426b77bab2b08ee9dcfb00a85cd945cf5b8c79", 0x63, 0x5}, {&(0x7f0000000a00)="f803c5", 0x3, 0x5}, {&(0x7f0000000a40)="52e8a6b24c8b48e42d137e2a67379323cc8bfcb1ce49528457366b065f530ad464221e5ae7c4310197a61813224bd084563df890e552b3b827a9", 0x3a, 0x3f}, {&(0x7f0000000a80)="be721a453349015a186d0eb4792553531a0cf3906630d437110e1215121a907ffe82501c98b08dfbfcc84b0efa53e86e22c111ba1705c5c800da1faded92a83425562042646c466de5cf509c6941b1fb75f0c45c278dc4a1678eae02ef86d9014ecb2d11ad3c6164fc3b7a4a897dad9a5b50964eacce36f54325792b002fc0ee3274c3a905e797e9515eee47d6b7cd61470734938b9d9201ad0b32f8a79eee6147902be00babeef1ffe3fc49b770437fd5206d057b506492d67dc8f1327e2852841832f7e796a5b66948a9bf80e24b614f", 0xd1, 0xffff}], 0x40, &(0x7f0000000c40)='/dev/midi#\x00') ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xe6, 0x3, @buffer={0x0, 0xea, &(0x7f0000000240)=""/234}, &(0x7f0000000440)="c7566a469453207021d70803f9986613cc6229718d07d88dbcac3cf060503c8940c88abe93eab16d1a9e340bbb189f1f0baae26e82868e7e199b7d5f05bf7706b3f8d793a4d5f3d0108cfc490819bd5b942e4667a0d28657a16082cc2f7d6dcc40f8b3260a26702b6fea22f6b7005e22fc19e627820aa8306690885635f56c931a024c9e2aee7cb7d463ed4f671f4ddcd4a91fec988799df46da2acf7a37f6992c0dec3cea7905f6ac34894fdeb5351b6425d5f8ca281e98c4ae3b1e2c9af3eb24a691d612e58c504ddc3101c01eb877733370edd5d7f8e3f7824c03d3679ec64d075fac24cf", &(0x7f0000000540)=""/182, 0x1, 0x1, 0x2, &(0x7f00000000c0)}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000c80)={0x0, 0x4f, "d6584d276ede8b82818af518ea897ef452128f075376be434d030b879db056370415bde7ca8e9d7abf62e31f899061f77caeff3bfd5b4f2404dfee423ec470b3b8d7ad3500b2b81e6f16a25fa335ab"}, &(0x7f0000000d00)=0x57) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000d80)={&(0x7f0000ffe000/0x2000)=nil, 0x26f, 0x7, 0x20, &(0x7f0000fff000/0x1000)=nil, 0x9}) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x4, 0x2000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000d40)={r4}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000400)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000080)={@loopback={0x0, 0x1}, r5}, 0x8) [ 734.808716] FAULT_INJECTION: forcing a failure. [ 734.808716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.820652] CPU: 1 PID: 17435 Comm: syz-executor7 Not tainted 4.17.0+ #105 [ 734.827659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.837002] Call Trace: [ 734.839590] dump_stack+0x1c9/0x2b4 [ 734.843210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 734.848389] ? do_raw_spin_lock+0xc1/0x200 [ 734.852648] should_fail.cold.4+0xa/0x1a [ 734.856737] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 734.861871] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 734.866472] ? mark_held_locks+0xc9/0x160 [ 734.870621] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 734.875211] ? print_usage_bug+0xc0/0xc0 [ 734.879287] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 734.884411] ? trace_hardirqs_on+0xd/0x10 [ 734.888581] ? userfaultfd_ctx_put+0x810/0x810 [ 734.893180] ? mark_held_locks+0xc9/0x160 [ 734.897340] ? free_obj_work+0xbb0/0xbb0 [ 734.901413] ? free_unref_page+0x6e3/0x9a0 [ 734.905659] __alloc_pages_nodemask+0x36e/0xdb0 [ 734.910336] ? mark_free_pages+0x3b0/0x3b0 [ 734.914580] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 734.919601] ? print_usage_bug+0xc0/0xc0 [ 734.923665] ? kasan_check_write+0x14/0x20 [ 734.927908] ? trace_hardirqs_off+0xd/0x10 [ 734.932148] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 734.937264] ? __lock_acquire+0x7fc/0x5020 [ 734.941514] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 734.947057] alloc_pages_vma+0x3a0/0x540 [ 734.951125] do_huge_pmd_anonymous_page+0x61c/0x1b60 [ 734.956236] ? perf_tp_event+0xc40/0xc40 [ 734.960307] ? __thp_get_unmapped_area+0x180/0x180 [ 734.965235] ? memset+0x31/0x40 [ 734.968524] ? print_usage_bug+0xc0/0xc0 [ 734.972602] ? perf_trace_lock+0xde/0x920 [ 734.976756] ? pud_val+0x88/0x100 [ 734.980207] ? pmd_val+0x100/0x100 [ 734.983758] __handle_mm_fault+0x2d6b/0x4460 [ 734.988174] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 734.993019] ? graph_lock+0x170/0x170 [ 734.996842] ? lock_downgrade+0x8f0/0x8f0 [ 735.000998] ? rcu_is_watching+0x8c/0x150 [ 735.005173] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 735.009590] ? handle_mm_fault+0x8c4/0xc80 [ 735.013854] handle_mm_fault+0x53e/0xc80 [ 735.017928] ? __handle_mm_fault+0x4460/0x4460 [ 735.022515] ? check_same_owner+0x340/0x340 [ 735.026841] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 735.031860] __get_user_pages+0x823/0x1ad0 [ 735.036109] ? follow_page_mask+0x1d90/0x1d90 [ 735.040602] ? lock_acquire+0x1e4/0x540 [ 735.044573] ? get_user_pages_remote+0x17a/0x440 [ 735.049330] ? lock_release+0xa30/0xa30 [ 735.053302] ? check_same_owner+0x340/0x340 [ 735.057625] ? lock_acquire+0x1e4/0x540 [ 735.061599] ? rcu_note_context_switch+0x730/0x730 [ 735.066555] ? down_read+0xb5/0x1d0 [ 735.070182] ? get_user_pages_remote+0x17a/0x440 [ 735.074938] ? __down_interruptible+0x700/0x700 [ 735.079614] ? down_read+0xb5/0x1d0 [ 735.083240] ? process_vm_rw_core.isra.2+0x438/0xdf0 [ 735.088349] get_user_pages_remote+0x1a0/0x440 [ 735.092942] process_vm_rw_core.isra.2+0x467/0xdf0 [ 735.097893] ? alloc_vmap_area.cold.44+0x24/0x24 [ 735.102653] ? lock_release+0xa30/0xa30 [ 735.106628] ? check_same_owner+0x340/0x340 [ 735.110952] ? __check_object_size+0x9d/0x5f2 [ 735.115464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 735.121000] ? _copy_from_user+0xdf/0x150 [ 735.125147] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 735.130165] ? rw_copy_check_uvector+0x30d/0x3e0 [ 735.134925] ? proc_fail_nth_write+0x9e/0x210 [ 735.139426] process_vm_rw+0x300/0x360 [ 735.143320] ? process_vm_rw_core.isra.2+0xdf0/0xdf0 [ 735.148431] ? kasan_check_write+0x14/0x20 [ 735.152698] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 735.157636] ? wait_for_completion+0x8d0/0x8d0 [ 735.162223] ? __sb_end_write+0xac/0xe0 [ 735.166225] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 735.171746] ? fput+0x130/0x1a0 [ 735.175028] ? ksys_write+0x1ae/0x260 [ 735.178822] ? __ia32_sys_read+0xb0/0xb0 [ 735.182887] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 735.187899] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 735.192903] do_syscall_64+0x1b9/0x820 [ 735.196784] ? finish_task_switch+0x1d3/0x890 [ 735.201279] ? syscall_return_slowpath+0x5e0/0x5e0 [ 735.206206] ? syscall_return_slowpath+0x31d/0x5e0 [ 735.211126] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 735.216478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.221328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 735.226508] RIP: 0033:0x455b29 [ 735.229681] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 735.248946] RSP: 002b:00007f51ec991c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 735.256649] RAX: ffffffffffffffda RBX: 00007f51ec9926d4 RCX: 0000000000455b29 [ 735.263916] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000000c3f [ 735.271183] RBP: 000000000072bea0 R08: 0000000000000001 R09: 0000000000000000 [ 735.278439] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000015 [ 735.285696] R13: 00000000004c06b1 R14: 00000000004cfc88 R15: 0000000000000003 [ 735.299311] binder: 17460:17500 BC_FREE_BUFFER u0000000020001000 no match 03:38:06 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047060007d82c99240970") r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x20000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet(0x2, 0xa, 0x8) recvfrom$packet(r2, &(0x7f0000000000)=""/191, 0xbf, 0x20, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x709000) syz_emit_ethernet(0x21, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) [ 735.307637] binder: 17460:17500 got transaction to context manager from process owning it [ 735.316139] binder: 17460:17500 transaction failed 29201/-22, size 0-0 line 2843 03:38:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0fbb6e7de74056caa4eb739bd202f976d3812b5a7111102e5b74c9bbc7cd2ce171c3c47ba476348b46757a5d27628a900623a88e3b0ebf5636c1a38e1fe3f0b1a47dad2c5f190a375cb1ed1e51e96d287719121f941566ba866ec47f41d6a4d32b6bcde4a413541e495f68265ff0e7aa4e2ca515356b8a5071c779e5888e5b2e24b076fc936d4c64e76a78bdb3c79a86971699db89b0ae0704cc30435dea20462600ce6104c4ed0aa5f733fdb76fe1d950fb8b188b9df73e7c4b3638bf3baa9d1d9dd90bb327568b095e39edec69bc5461deee9f1de291dbf559f69731c39e1f8c257a261fac09fbb8ccd5af60c254db3cc0268fedca03", 0xf7) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1003}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x58240, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r3, 0x3}, &(0x7f0000000280)=0x8) 03:38:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x200000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:06 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) getsockname(r0, &(0x7f00000003c0)=@hci={0x0, 0x0}, &(0x7f00000000c0)=0xfffffffffffffdc8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty, r2}, 0xffffff6a) 03:38:06 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfffffffffffffffe]}) [ 735.438091] binder: undelivered TRANSACTION_ERROR: 29201 03:38:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4000000}}}, 0xd8}, 0x1}, 0x0) 03:38:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x2000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in=@remote}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e24}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080), 0x14) [ 735.504127] binder: 17521:17522 ERROR: BC_REGISTER_LOOPER called without request 03:38:06 executing program 5: syz_open_dev$urandom(&(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x4ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abcfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) getpid() ioctl$TCSBRK(r1, 0x5409, 0x80000001) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000100), 0x2) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) 03:38:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1600}}}, 0xd8}, 0x1}, 0x0) 03:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@int=0x80, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)=""/204, &(0x7f0000000140)=0xcc) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x14) getgid() setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) 03:38:07 executing program 5: seccomp(0x400000000000002, 0xfffffffffffffffe, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) socketpair(0x13, 0x5, 0x7fff, &(0x7f0000000000)) 03:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xffffff7f}}}, 0xd8}, 0x1}, 0x0) 03:38:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 736.287167] binder: 17521:17569 BC_FREE_BUFFER u0000000020001000 no match [ 736.294246] binder: 17521:17569 got transaction to context manager from process owning it [ 736.302677] binder: 17521:17569 transaction failed 29201/-22, size 0-0 line 2843 03:38:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000000100), 0x300, 0xffffffc0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0xfffffffffffffe07) 03:38:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x84002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0xfff, 0x333) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003100000000000000e4000000e7ff0000246b4b12b8830c05687fac4fe362678221c8af"], 0x14}, 0x1}, 0x40080) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') readv(r3, &(0x7f0000c43f70)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) 03:38:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @rand_addr=0x8}}, 0x14) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 03:38:07 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe5f) fallocate(r1, 0x3, 0x0, 0xffff) 03:38:07 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x5201}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x400300}}}, 0xd8}, 0x1}, 0x0) [ 736.423796] binder: undelivered TRANSACTION_ERROR: 29201 03:38:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x6000000}}}, 0xd8}, 0x1}, 0x0) 03:38:07 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x128, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [], [], 0x0, 0x0, 0x240, 0x3a}}}, @mark_m={'mark_m\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2b8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x8, 0x8, 0x7}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0x54, "eaf01dbda5132c5bd19d9a50387767a48d362482d0c5a8c98749c7df11cd701ef1ac88d662f6bc43b844a5f2f7dff364a48d5568cd5d65e27a9bb5a73379c24c39859b13788b5069a61c112cf99ceb5a0e90737c"}, &(0x7f0000000140)=0x5c) 03:38:07 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x81, 0x30080) ioctl$TIOCEXCL(r1, 0x540c) prctl$void(0x3) readahead(r0, 0x5, 0x1ff) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x5, 0x9, 0x8}) sync_file_range(r0, 0x8, 0x8, 0x1) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000080), 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x100000000, 0x20, [0x63e, 0x5, 0xfffffffffffffffa, 0xa7, 0x761b, 0x7, 0x0, 0x2]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000100)="3c2dbcd405e8e96a639a2fee86dd", &(0x7f0000000380)=""/215, 0x2}, 0x28) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000002c0)={0x6, 0x1, 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r2, 0x80000, r1}) ioctl$KVM_NMI(r3, 0xae9a) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x48000) 03:38:07 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x90800) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=""/39, &(0x7f00000000c0)=0x27) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000300)=0xfffffffffffffff8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080), 0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) io_setup(0x3, &(0x7f0000000200)=0x0) io_getevents(r3, 0xfffffffffffff19b, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8) 03:38:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0x5f5e0ff, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@upd={0xf8, 0x12, 0x238, 0x70bd26, 0x25dfdbfc, {{'tgr160\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x8000000000000000}, {0x8, 0x1, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000180), 0x4) [ 736.512197] binder: 17592:17593 ERROR: BC_REGISTER_LOOPER called without request 03:38:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x18000000}}}, 0xd8}, 0x1}, 0x0) [ 737.290099] binder: 17592:17629 BC_FREE_BUFFER u0000000020001000 no match [ 737.297230] binder: 17592:17629 got transaction to context manager from process owning it [ 737.305656] binder: 17592:17629 transaction failed 29201/-22, size 0-0 line 2843 03:38:08 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x8000) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0xff9b, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 03:38:08 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x23, 0x0, 0x0, {0xa, 0x94}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xf001, 0x100000}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x0) 03:38:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x8000) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x100000000000037, 0x10000000000005, @tid=r2}, &(0x7f0000000340)) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000180)={0x5}) 03:38:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:08 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000480)=""/132, &(0x7f0000000580)=0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="a7d0bd5b4d850fdb3a4af056320dfb9f492b3b7571be50aeb867bb4011bc5f3b781b8769956537064eb0c974b02e6fc9fbea569537ce7deca3400fb6fa9420e1618d30fc40ff95d684f94ebb4d33685244d8a7b21201afede8b0a1d223f7ad50d9c4d73e260a5a01f9fcbea79213e90e574340795e14dc907da78e8ff1cce863a9d2", 0x82}, {&(0x7f0000000240)="d2764b1c084088bad1a2b19c3553dbaf40028da010c14643c9827fc6a70fd974698a2bb003be3ced3cf81a498fa376d76c2c0c70010e007a0900d46fa72a3b13617922cf729e739a83bdbca8551fedae971dcdbcf83d45f837bc509e1ee54904435e6e2407da4a3530609874945303632b56e5d69cc771710209549b71540d056fc5b112b1e8c69e89e7", 0x8a}, {&(0x7f0000000300)="df92f104814e5471dffe38fafb2a41f856b80c14c66c496939565ff9bc5cf297fbb4c52487333f42b97506557e0f685db664a6aaf715bd1c0986d2ebab548bb712252c4f88667abbf6300249", 0x4c}, {&(0x7f00000000c0)="0817b2072d82efd3283fdab2b4e627795adb1fd5d930a7249357", 0x1a}, {&(0x7f0000001140)="d343f3c1ffbc9c396dbf5ff4bbd978555f272ed5f1b96395a3e799806be120c9593c8e6075073635142b7b1a6db85739a6ab7988057ebf2cf06af3e21092c51b016db1479a2ff610f3ce4580c173a8c65be1efd1d7a372bb2a3033220f5247fe14a182642c425723ee2c77bc8918cfb0c051fd9f3cfced0247b18765261ea19ee080acebcf59f9bb1cb2c16ef9dbccdf75c057536096695c3e6c151ea33a1f91e51696b1fb2495bafda3035aa17e61b9eb94e273e9355bb0ae3fded53eb8291f14f8194a68b73f30ba6b93613c9967c690a5315ccdf5d0353d56c22e3df533a00bed96b3d63288d08079d59741b406e78634576fb95243ee7c9f403f82e0a796f2c6a287b5d2f6a63f6f96de2be2077e208471638bfba6f2cfa48edce05e1a880b59bc4fb753479391e4e62e57efda6e84a670f6b2bae0dde7272d2a085569f80ccaa326d9de43976b17744de40a8f83c393819a55f173368a52e221113e1a37564caed73580766e46fda67f3e1893d0b9e5433300629532d32e2f055c99d916f48ad47d65e30cc676b13bb2152adcde8b1c78c6345efc6f9388decedefaeacc5a7fc02bc308c0a570a0e637ee15d8932b68d3535a5143826895c1d1179abba6b223513312071ba5b4f29d4cfa459374544459b2befd0a4393e5c27837d861d83793ae86f73e4add3aac1c7441eeddfa3f94d472ffb5c47ad402c8290921b23ee2825e9868100a5002430c8aa9bb36068fae23951eb087bccbc6a2d621e5570ed39f93d9c0415f4d9dc6ba4bf9eae4ec73b6ae4707c97973e31a4a60ea4d1fdcb8f9c1790e65c10e60d6fb5569e3081dde3343fe01f8b41cc8123b08a498b563c6b7558157f22be0f6ea469dfb89947a5f8422a09198161955df7d11605fe1ec0d4745b83b3797aa5e4e499cbdb3d280c16d12dafc2510fc3169934c45da45dd4c3c6412f62b6fef3ed809a04287c145ae4a5097cf35c4ebd5a3c2f68a3613ec34adcd0095b17431afdf514ae9e64a7cf8afc38d30ff0a62563c57c46b9ce473f50130290bb8b926f55554bc5403b8d6988fe70e1c609b884a4fcbbfae617fc210d546d096956fc21dd75c69a86adb9ed3c4f647cec3c0b98fe0194a43d3db4bffa8f98c4d5ee141285e27df7088ace8b305fb61ce91779ca35ff4f8402d8befd90a6a847a8f99f9edb8b28c14f134a6110f687acb51533eada1167d361079fae481bbf8d1f89ff38c5ef167eaac17d6e8371ae07cfee4fa8584c727fc1512a0d41bd4d9f4d82ca8fe3b0ed5003bcd65937d3df8721c157fd18c7851f226acde4a6594ecb83fbc7b13a6b77756d55e0971ced7ba046a61fa4121fa1adf5dbf17925d22861845a30ae87b23010e1d06ccd278e1cd622ae44860dee5aee3c3fd3f06cd2d29713cc6801491ee6dee477a6f906dc8648808284cafd42433b63ed0135559bbab16dd060b293087b9d487f4ab2be428a121d917d858dea8740364118dc124f7084fe96875ab2d2d1390d6472f90595ab88958a17427ead75fb7d160e47c628cf3a0196eb149bfd436e71d27ca84ae7c6a3a3f096dfcb5e2bbadc72f162870a7d18bd6a15681b92cc0396c1708a90717d9a958b46ab92f35124d42bbeb757c11db22dc4b82c040cfc011e00285568263dba26d4c0fc2489bf8222017865e54f64b5e342b7555cde2e234fa448b128e6396e56c5c848d4faf5c100c3824c0c64f2eac2f4b57e488bff6a474d71e9cb4feb31f2e5ff8e9658c8360ef09141318311c05fad44396a97ba261b644bead19a7294e8138f8eaa8dd33483425c7acf580bf8ff8f76724b87566bb78837f5da6f18ae0dac8dbafeb2711efe7742958f8e4be52960bc7b8aa29925a4ee0093d84b228085a4cbeb103f198af744a3d31c0836570427f97ca7ca62b6270a8f9736371a8543ba2b901147e839767e037a0ca7e13ffa9022745591f8a26896503db1fb875944b8f30379a046f9414b717b1a39364388a9adcc9e10ea59bf92b6ef070dde06c9978efe1b5380fee9cd0db8fc106dd6a3c6739c875d5b0e957c72895c7cfc29db272d9176c4a18f3aef5290dcd86348f8460e8e37fb7990827e2215cdaa6cb2d9029d1dbacafbb0bb614ab3a708df28c4bd65d34f73b8dbe2e559d915111a4391a79a6d00ffb6ec90e958e23420560690bfc4c9ea11f3308a63d969583af8529f1f239881fd355c47a8f15dc7f2d09cf84e5b156d3ed352ef6b447a139c647e837de6ba69d580d56578ee7d66bad2364ceda6050a071e0df2ae4dbaaf9250b6e998e2e6ceeaf5d6a3383fe532e0e88865a47cbea89ce530a8c120b1bc96ca0ec17825b06eecd22ee37162728d327075ffdc13b5e64ae9546dc4447710b5b1dbcdaffc1c7a140c677fcdea7d17c647df9db4bc1afb6eb202d166755890c2b401d74aa63eeab318377196ef0983c985a983e08f493432c83840bb69f3124a72f8c43ef1917199104dcc413579e6db6c9a77812ea11aa6dc19c0e3b6b2d9d4b3060d85b99a6d0f05eaed6b4b4f1889c6fd8648fcf73b2f130690e99a71c86d9eacdc5908a9b4dfe303f41cbfd5ce4b25bb47549d7c1481577c99c982ccadb334c382f7dce17e3564d25380ac85fd356cb41bd7a7415213fbac39a163c017e94fca49cc7c5082dd4b91405f190d02bb9b5046500b3e7e2556ad5edb2e0a444b9ef634f35f7b6119abe3b7fb56a030087be36f8de3a052f802871cf4053acdafb2f62abbc723e4ffc5d0991197508f471cb603b71c93e6ecda33620f5520b4225b8b99b944dd62e3982870d4d0720081f2aea1f9cefbd0d35570cdd1d4a0f51b22da6276f3f8e97b3c0983c226742c589dfb92620b9fa26bf2dfe083204c87b4e22632068f49f4aba5b5e6de9cb2c347ab66dc811240f7b80dab575ff497cc14a39214b3ea73bbecae5de5e37a675a3bb686f2dae740952e70758226327d803b0e0ecde4624837103212ddd47d29c58cec0970e8cb1c65271157c7bd59c19717790e5bb644a84109009c858293a7f06defe08a1e965672861dd5f519b86147fb0e2a6f69f89d3ba3719e565038f60d14e897448008ccaa347c9b4efc657a4c94870f6156384d75e3cd78000b617bf5afd60fe3d0c0c13af2fdc88ee6cc36f2dffdf65ef6adeb7edcb37d6b91e49811acaab1200667ed6a481430f991969d18ca80c426c7aa2de8a30238e2204451e3758112b6763cda43d2cfa9cdc8493739de246b9b8e8e75a3aec3629dcb004802df947fdaee218ab8b6ae771c5c273d85774982b172c00cf40fef7f424669886151ce3782a3fd1eb68424ff095fe68cb1dd247ac5f46c58e9b57c4cb6b7a01958ecc5759ffc857cff032a02f69487570e8892e98f3a83282b7b01fec3130c725b6e14ff4748ad8fd7541f917620046c158f1abc3992b84b36559a11e2a4ff86bc7db6558efce61d1e83200b57e91ce6a941d86b8f117177021f16d02bfb8262afa94892e718978a617180071973db7955456a2fdc502143ae76944e1797e3cef28e2044566a352c00c58a125899ac28d3a0a2efb48f81d8f7062bdc3c4041d6a584adf0420a780d15fb2a2f3cf76b01f1966bbbde7daa11ca09a368bb5528c87e56943822b82265628de22571f2ebb47a6e5b3e392fbb846e40ef2f5bfcde27bf7825fb7c707e90d04970ad4116e76e93942c20ae76ace689e28da8c13fd412d54fc8c6dcc1841ec4dc855ccfe6f437de3b03078c1f468a2894c900d193475a9eb9ff6f7aa17b7ad02916695eb7bac896ff0039a321cc696c75b20584f0876e97cc061d8720e35d79a6cb1c4825227fb1ba7c7449e1452d3d5095fdefd512e263854b59545a3dd69e1376ee8d85cd297a18a794592bc0e893620e1599ad1bcbe73525f43e62b693d9cc4c8967d0093bca00b89fae5ef760df7263e072918fa94dcc37e76fbd4c2c1d73a17ad891ba9e6b2c841f468a57ede0e3633a2a9e6350b1d7965f8c9f3ed514c7d2224f879c1ba87c5ce33ed0a3914225fb4dc7568afd61252f7b44a10d15dc8281d8c0f289e6e2403c4cc3169e5733e28262cd9578dad424b6d296db50e0b9599c5b610a771de109bb64556b4737cd884f2317c02f070772baede5ad99ff30d71bd56d08c0dcc1e83cb0d23aae6f7acfa858bfb8402c1a552682dda04072ed8174bb556b8d493bcc36dc01f379cd12e5e381d3e83e7b6c87300c70df6e343057539c82673c116af67eca83d7825941900239f18a0818879f17feecf6ab983cb3038435ae19214b01f16f96f6bdecf963de3f3e5756b5a97066378c946c15e3ff8dcbc98f7838fb2627c708d1244e3b3443dd765b046a37b3cf6b27ee04b95f70fa8cadf617c8962bf762bfadd2ed5ba905f9ca33469ea9c8b0b34d63fcb456dc3853e7638f6eae0404d40ac67a042c085ebe1912c93f7b90308e573b23b4526e01bf6a38a76a614fd0855030fd2afa6cb257b099d2f5648541ee2c77c0a9b5afbdb1160384997552a0e40da13208302ff677d24b208044f7e3a92150db8eb8fb6ce97fa726d3b04675d5098a86ca657b2a35fb397e52990493139d86124e999832b368d8101cb67f8ebc2bb75986d8f968352fd9c1dacb5a55e97c0f426282680960f1bc529f0797c8cb20b960181dfeb88874cd0ca0fd511f88807a442793c480165460d7187025e4a018d1b1996689ed6d90dc61ebce367f7c1136b7b261a212c15333748e82ef581886e8c6a82b6d868429b9c20f0dcc1025d57641bca998326dc9c36f109f62586f0244c4dc26babcaae5771ccd2ad5fb648146e29777dd83275fd3a1345bffaf7708af1904a7b5983c5ddd995942079f5d148f1611e2cc9f01df5cb58b61c17870bec01912cfa0fd750790f0e5be94dde5851ac70e8ac1f8b76a6c3212c08144a6cfcfb81f614b6e3a8ee871fb0867291cb06a6b3023f1d69b4062476f6c4468f87ee4bddfc6d8cb5a7397ef278f615d7469b5b69a5df4ded53de0a693c2f80b38241a7ecd222ab0b92931d87ce43e1aa66b612c4d9982ba1df3f206487d242d117c0a37571d8746640e92dc33afa022657f7705f1f0ca167fd4dceddcd23cf103539390095273ec145b5b4c0c1d9aee451f3271036b2ee1cc2242eb0d00ff2ba72c83633b1087c770c520890880f5a9e5037e5ab8cbb476863a5da007e3429cf445a5952dcbbbaaf982544de8e81b5ad7551d6878759232363275962f75397a4f0af76c61caf8b6593525eb5f442274c5d4bb746fff0804d4e886ff9ef9b378e8bc0f1ef316e97011ca339bada2f10f9bd1e3840a7d72fac8632652d33ad8fc795dad8565ace65987252357bbe4ae2295604f9e738f7489d15e0821648a30456b259bcdf6ba547ca1106e60fb8ba6a13c98ffa937c88f143050401588b36a132420f23b91b8c3c8a55762549f4d0047caa78e48c0ff503aaf4c1eaf92a32e6c5e1cd90deefb68ff464996a7b93738266d12a5f612615bd4ddc0adfa5393d6661efe7f4a9ef213b766893ef3d86e1077ac1160baf70fa09e2bd19c49093e75a5b2b6c507b142b91217529c396e4e62cebe3afd67f6cfee8cfe3cf6d2c0c84033e1b01bb593e60c266bfff47493eb956f5fb55cb4160a0d66802ca4368ac1ac91870aa987ab2abbb2ea4c05542a74e5280a2fae9696c09a00cff57b67e79d5268184afaf82bb015af58960c8f94eaca36110863cf78223be828d3daaec98d5d2ee15579626e247cf991725eede0096825ca85ecaa48b8b31bd70d5271317cc05d710c410f1a7336c99318c23b1", 0x1000}], 0x5, 0x7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) chdir(&(0x7f00000005c0)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x108) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000640)) syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x400001) preadv(r2, &(0x7f0000000500), 0x0, 0x400000b6) renameat2(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x2) 03:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1d000000}}}, 0xd8}, 0x1}, 0x0) 03:38:08 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2034afa5}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 737.424560] binder: undelivered TRANSACTION_ERROR: 29201 03:38:08 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0xa600, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff86, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x400) r1 = syz_open_pts(0xffffffffffffff9c, 0x4000) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 03:38:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000000000000000, 0x24000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x3}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000adafa0), 0x8) bind$bt_rfcomm(r1, &(0x7f0000000240)={0x1f, {0x1000, 0x4, 0x7, 0x9, 0x6, 0x3e4}, 0x2}, 0xa) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=""/221, &(0x7f0000000200)=0xdd) 03:38:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r1}, 0x14) fadvise64(r0, 0x0, 0xffffffff, 0x7) 03:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x18}}}, 0xd8}, 0x1}, 0x0) 03:38:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 737.496543] binder: 17650:17651 ERROR: BC_REGISTER_LOOPER called without request 03:38:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = msgget$private(0x0, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgrp(0xffffffffffffffff) r7 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x7, r2, r3, r4, r5, 0x0, 0xfffffffffffff21e}, 0x10, 0x1, 0xfec, 0x3, 0x1, 0xffffffffffffff43, r6, r7}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") clone(0x3ffd, &(0x7f0000000780), &(0x7f0000000640), &(0x7f0000000480), &(0x7f0000000700)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 03:38:09 executing program 1: prctl$seccomp(0x16, 0x1, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x16}}}, 0xd8}, 0x1}, 0x0) 03:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 737.686494] audit: type=1326 audit(2000000289.116:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17677 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0x0 [ 738.283438] binder: 17650:17692 BC_FREE_BUFFER u0000000020001000 no match [ 738.290611] binder: 17650:17692 got transaction to context manager from process owning it [ 738.299067] binder: 17650:17692 transaction failed 29201/-22, size 0-0 line 2843 03:38:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x2cb20300, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000004000000000000e0000000400000050030000ffffffffe8000000a801000000000000ffffffffffffffffe0020000e0020000e0020000ffffffff040000006fe3abce071925c0a77dbc28cbb05cdbdef374c71c332bfe27e10d62a15ab4c474589c665db9f67b7931f3c1e9ea83566d1957fd7b09d2dae9596cc5e9cfd5db328ccc9f39f25ea42457f85ac869cf6c099d2d7ac61ff47d3eca7ed24e0705640c23b20042b214e8956914d2f8f3331f1258a0cf1de0eee051d2497757be706d2b4c78c5cdeefa5c96d3aea7c881ec54311885a402fe14fd643cf05fa95d449054", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000000069636d7000000000000000000000000000000000000000000000000000000c048c000000000028004e46515545554500000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001001380100000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000001000000010000000000000000000000280074746c000000000000000000000000000000000000000000000000000000030400000000000028004155444954000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5aa) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x100000001, 0x4, 0x6}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={0x0, 0x2}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={r2, 0x1000, 0x5, 0x20, 0x4, 0x20, 0x4, 0x8, {r3, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0xfffffffffffffffe, 0x9, 0x7fffffff, 0x2}}, &(0x7f0000000700)=0xb0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000001d00)=""/4096, &(0x7f0000000000)=0xd88) 03:38:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200e00) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f0000000140)={0x7}, &(0x7f0000000180), &(0x7f0000000200)={0x77359400}, 0x8) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") clock_gettime(0x2, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0x9}, 0x4) 03:38:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x12}}}, 0xd8}, 0x1}, 0x0) 03:38:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x701240) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x103}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'team0\x00', 0x402}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) 03:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:09 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x10}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 738.416230] binder: undelivered TRANSACTION_ERROR: 29201 03:38:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xa000000}}}, 0xd8}, 0x1}, 0x0) 03:38:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/39) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x4, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0xfffffffffffffec1}) timerfd_create(0x0, 0x800) 03:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x20000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='attr/current\x00') setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000740)={0x8, 0x7f, 0x9, 0x800}, 0x8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x5}, &(0x7f00000001c0)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={r4, 0x10001, 0x10, 0x33}, &(0x7f0000000240)=0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = socket(0xb, 0x0, 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="280a27bd7000fbdbdf25020000000800010060240000080001004e21000021588c65e2fc8d65655b866766ab51"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8c0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffad59575, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') ptrace$getsig(0x4202, 0x0, 0xffffffff, &(0x7f0000000680)) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bceb6500", @ANYRES32=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40891}, 0x4008001) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000840)) [ 738.505856] binder: 17710:17712 ERROR: BC_REGISTER_LOOPER called without request 03:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x9000000}}}, 0xd8}, 0x1}, 0x0) 03:38:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mq_open(&(0x7f0000000140)="75736572407070703173797374656d73656375726974792a73656c696e7578242d70726f635d70726f63707070316c6f73656c696e75787d28816b657972696e6700", 0x1, 0xba, &(0x7f0000000000)={0x3, 0x7, 0x59bf, 0x2, 0x800, 0x4, 0x1, 0x2}) r1 = socket(0xa, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 738.584755] audit: type=1326 audit(2000000290.014:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17677 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0x0 [ 738.620537] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 03:38:10 executing program 1: r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) flistxattr(r0, &(0x7f00000000c0)=""/218, 0xda) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:10 executing program 4: r0 = inotify_init1(0x880) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) pipe2(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000001940)) fcntl$getownex(r0, 0x10, &(0x7f0000001880)={0x0, 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f00000018c0)={0x3, 0x401, 0x38a, 0x9, 0x2, 0x5}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/null\x00', 0x40000, 0x0) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000001800)=0xfffffffffffffe00) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000001840)) sendmsg(r5, &(0x7f0000001740)={&(0x7f0000000100)=@l2={0x1f, 0x80000000, {0xfffffffffffffa39, 0x7, 0x400, 0x7f, 0x1, 0xcfbd}, 0x2, 0x209}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)="c7c019d4473a9dbb2bb51a39f7cafa7d662a816bad2c41c340a2b702a7a2b4da96c81326e4543a3659e9f52e1bd762596e10f03bffad81e69b6b466addd89d8bc1d87d2683c084b68252105920e2558bcd4f2ad058b004e21ef51d226485397c3398cd76fd3159a1e1af80c0a11323d0d26c", 0x72}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="af89d45fb9b72e739f9eeb2ed3205d9ece908da72b011574dd167defb0c274649a448295dd933527a93731e86b2119af519b997cbf8ec60f5cfdd71dd543275dfc6545d4fb6aef7672e24217d9ea73f71b83ea2e040b8da012ef11947fdd08c4258156ff48fa37986ae0f1d5be98611476ad6851214357d5a9abb6afb2fe4436b410dd3a59eed0c8440fe2f4b94a2ff9f4438e9eced59b44bb7f3352689e7f", 0x9f}, {&(0x7f00000012c0)="d41f661cac60230ffef08b2e35e59deef0225874ca9ed492fff7e5be5e6dbc70f5854ea68701718fd914e3db4674c2d30da1c14b0ec840bbfa238c0943b0a06b28f4752d56963278395f3c2ca62ec13378395a86eb39858ba9357ad769d67100d172d766282010ee09aa47c15d78c56c1b42ddc4d5f35422efd155dedca99da1a569fb817febfee0f9178cc3bb4935884e9edca0c4ff00da05957526817c9945b926812f63d3d89722b650a5555072e8b16bcfa038d6f65e0b7b", 0xba}, {&(0x7f0000000080)="7715d824f7c9a09da2bd78e8cd5c19a363", 0x11}, {&(0x7f0000001380)="f52dcc8325c22a3673665b2380849d32d31c25ded0ec99d9ed685a3b0c2baab07b2f1e3c0198b1ee9fecc62ffb96cb0ba3ffc648f3ccab6ec4e19dc048fe5be0c5729ba8399f7912e2ddc74909d8f012cee993d7e41e22cdad95525ad2376dbf5eab3974373def1b995c99e88e109f37b5361673f028bdb66baed46fb3aceb5326e32b6356fdebe0dc184ca1db642d792806cbc7843627a80dd6cc9dc82c2caf9baae6cfec670a3ea09e183bcbb28a73a01319617a", 0xb5}, {&(0x7f0000001440)="5883d7689d195c397441511b2999b547f4a54edcd94608c566306d7b776a312ffa16f7bbf4d413ebeec9029d7d45accb0be9c411874601f4fffbbd112586cfac76954a394efa6e16e368b29ef4a1b2169b8f66bd0ddc18c8effa78c2aa165ae9d36da44ec6449934eecd6c98e56c97fcf6d6c485307f3489a715c1041aa6f00e23d1e103a0196e8ee78f8e2dca54816cbe5dd5751c9e50c281621b72", 0x9c}, {&(0x7f0000001500)="7138e3f3d4b385e16bec66bf363bb51a3bf4cb7864440459166d21cf3ce693620706332a7c515232be0a947a43d5e4488c6d78359e003c0d327ba628454a4810b620fadfcda37bd6c0011b694a5f3f92220ab9a805bc8afc36e89ca421f88c57edd99a17b581f38140745e8041d4647042b25752a66371e0cafda49d36c6487f2fe8bf2d058b087f74caf9df6ac70162a3b6baa34b71925eab85ecbf3bd904a665bc", 0xa2}], 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="e800000000000000030100003f00000023cf6566a0182ba30bb789d1ad20748cb1f694a7f380c8254d513d9854636e155bc4d903197447c0337aa7f4eec8493f7094188d152b85d0a672588190a4527de66d2f4cbc15182e47b3de582eca6d11f9558bbaee1980f306b8af2f9e97a6cda7f5206ebbd78b2cf818ab494ef733027f9ec082e5140ca2b415e134d3a0513004c7e951ed79e72b13f50620f1ab4ce8fec9ae93418cc9b0f3fa315ad3276ec8573d5f5f483a69134119c4ee84e88ac803d8a716ad53c6d3cf05fd22445eb4f837d17a34ef4803d0ce0fb5f26d6a7bf0b84f3d0e8ec169f54748de952fca"], 0xe8, 0x20000000}, 0x4000000) ptrace$setopts(0x4206, r3, 0x0, 0x0) eventfd2(0x7801, 0x80801) memfd_create(&(0x7f0000001780)='md5sum{eth1ppp0)cpusetnodevem0user:(user(em1\x00', 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4206, r1, 0xfffffffffffffdf0, 0x10) ptrace(0xe, r3) [ 738.710855] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 739.285152] binder: 17710:17759 BC_FREE_BUFFER u0000000020001000 no match [ 739.292245] binder: 17710:17759 got transaction to context manager from process owning it [ 739.300632] binder: 17710:17759 transaction failed 29201/-22, size 0-0 line 2843 03:38:10 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10400, 0x40) dup2(r1, r0) r2 = socket$inet6(0xa, 0xfffffffffffffffd, 0xfffffffffffffffc) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 03:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1d00}}}, 0xd8}, 0x1}, 0x0) 03:38:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:10 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x8}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x3, 0x408, [0x0, 0x20000340, 0x200005f0, 0x20000620], 0x0, &(0x7f0000000040), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00', 'syz_tun\x00', 'sit0\x00', @random="152f47042376", [], @empty, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x5, 0x0, 0x0, 'sit0\x00', 'eql\x00', 'ifb0\x00', 'veth1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x158, [@mac={'mac\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}, @arp={'arp\x00', 0x38, {{0x0, 0x88f7, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, @rand_addr, 0x0, @random="a052672f43b7", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff]}}}]}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x7, 0x0, 0x0, 'syzkaller1\x00', 'yam0\x00', 'lo\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="b8da783398fc", [], 0xb8, 0x130, 0x168, [@limit={'limit\x00', 0x20}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x0, 0x0, 0x0, "3abde836efd45deb068130ab9aaf6d27886d6439ace2d0b4fd440e87c2fb4b7223646b15155ecf951a1d7d00fc7fe526baa5e3f08e12e9140b3b1bc39db92049"}}}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}]}]}, 0x480) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x1) socket$vsock_dgram(0x28, 0x2, 0x0) 03:38:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bind$ax25(r1, &(0x7f0000000140)={0x3, {"db0405e1ab510c"}, 0x1000}, 0x10) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, r2}, 0x14) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000180)) 03:38:10 executing program 3: syz_emit_ethernet(0x163, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @empty, "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"}}}}}, &(0x7f0000aed000)={0x0, 0x1, [0x6, 0x0, 0x0, 0xd0b]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc) [ 739.418298] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.448102] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:38:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb400}}}, 0xd8}, 0x1}, 0x0) 03:38:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={0x7ff}, 0x8, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) 03:38:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xc000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000001c0)=0xd000) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x4002) io_setup(0x8000008, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)}]) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) io_destroy(r4) getpeername$netlink(r5, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 739.488959] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 739.505481] binder: 17780:17781 ERROR: BC_REGISTER_LOOPER called without request 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000180)={0x2000003e, 0x7, 0x1b}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b01"]) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x89, "f02d2c045d3bf95a9dbea766124339aaf3022ac4b06b8c79f144723d12f5e970f09fb59aa5fb234f5e9ccbb80acfbe3778b600b0781a4d55f19533b53cbce52fbe6c19dcb2fd169d0c2d769b259a94ebce97bd4933f9342cf04c2b00021b4e9e8c5cdb8b0b5857f9349b6a3e96a8284844fa3ecd545fa449795ffa93ef29ddbc4f65ed6fddd8bffdaa"}, &(0x7f0000000300)=0x91) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={r5, 0x6}, &(0x7f0000000380)=0x8) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getneigh={0x14, 0x1e, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xae9a, &(0x7f00000001c0)) 03:38:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200180, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080), 0x14) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 03:38:11 executing program 5: socketpair$inet(0x2, 0x3, 0x10000, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x2, [0x77, 0x9]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x8, 0x1, 0x7, 0x8, 0x800, 0x100000001, 0x23, r1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4008ae89, &(0x7f0000000140)={0x2, 0x40000020}) 03:38:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x10}}}, 0xd8}, 0x1}, 0x0) 03:38:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x1a5) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000b73ea298e83a624000000000000095b87fbf2c65a9c08c3bdd802c9eb9ff7472f874ebe72e32a5a134d06fb80d2eaee1d77ba55de083c9f3f3bd67f05a16101025348c306345ec1dd66aafb3bdf707c798c7247729c23a42cf08a8d26862c19eae94504bb9f03c8b59b9b1e085bd6146f573c52989436b56bd044567ebc9e3b7bbec583a0b675e5d0ac1b297a8b617a2c5e8f9ed6198"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2, 0x3, 0x9, 'queue1\x00', 0xffffffffffffffc0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/151, 0x97}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x70, 0x0, &(0x7f0000000200)={0x77359400}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00'], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) [ 739.756688] kvm [17811]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 [ 739.782117] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 739.841013] kvm [17811]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 [ 740.288846] binder: 17780:17827 BC_FREE_BUFFER u0000000020001000 no match [ 740.295893] binder: 17780:17827 got transaction to context manager from process owning it [ 740.304279] binder: 17780:17827 transaction failed 29201/-22, size 0-0 line 2843 03:38:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(r2, r2, 0x80000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x10d00, 0x0) renameat2(r3, &(0x7f0000000380)='./file0/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) getpeername$unix(r4, &(0x7f0000000800), &(0x7f0000000880)=0x6e) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x42, 0x0) symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000600)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x12) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000540)={'broute\x00'}, &(0x7f00000005c0)=0x78) syz_mount_image$ocfs2(&(0x7f0000000900)='ocfs2\x00', &(0x7f0000000980)='./file0\x00', 0x9d, 0x1, &(0x7f0000000b00)=[{&(0x7f00000009c0)="566bbef78e3b861b2672e589a1288ea9eb7f7e32b16d5a2865821a33048b7d8e042e3f33f49123c7bbd9525e0042733b15d792e47c35426a972fb4432743a7a57e1790b8f124fadd0d60b34c1a0c296c2933aaff66196e595f08a56b47eee4e5035abfef72a33549e6606625817bad3b02a93b06302ad216876e140804f4a98a0a45b55d67db7c9e169eaa24fed415b5310552e0d7cec9ee4fe4bcb389f1b6c3a164b8a434ac6822e6637c421e6c8a424d", 0xb1, 0x7}], 0x100000, &(0x7f0000000e80)='/dev/vga_arbiter\x00') setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="1800010014ed00000000000000000000004072f813fad54d9e6d3e99b080acfca3c88b691896adbbeec984266f"], &(0x7f0000000280)='/dev/rtc0\x00', 0xa, 0x2) mount(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)='nfsd\x00', 0x24, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000b80)=ANY=[@ANYRES16=r2], &(0x7f0000000940)=0x1) accept$unix(r5, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x2000, 0x0) getsockname$packet(r5, &(0x7f00000003c0), &(0x7f0000000440)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000340), 0x8) umount2(&(0x7f0000000200)='./file0\x00', 0x2) connect$llc(r5, &(0x7f0000000400)={0x1a, 0x300, 0x6, 0x5, 0x7f, 0x1000008, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}}, 0xfffffffffffffdf8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/autofs\x00', 0x210000, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/null\x00', 0x101000, 0x0) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) symlinkat(&(0x7f0000000700)='./file0/file0\x00', r5, &(0x7f0000000300)='./file0/file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001340)='/dev/loop-control\x00', 0x0, 0x0) 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x10000080003, 0x85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@srh={0x0, 0x4, 0x4, 0x2, 0xc2, 0x8001, 0x4, [@mcast2={0xff, 0x2, [], 0x1}, @empty]}, 0x28) socket$inet6(0xa, 0xf, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000002ccb439af0f49c81d96fb75f4f62b4ef000000000000000000"], 0x10}}], 0x2, 0x8000) 03:38:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x14000000}}}, 0xd8}, 0x1}, 0x0) 03:38:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:11 executing program 5: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x3}, [{}]}, 0x78) sendfile(r0, r0, &(0x7f0000000080), 0xfba) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7, 0x2, 0x5cb, 0x8001}, {0x8b57, 0xdcfe, 0x8001, 0x9}, {0x5cc1, 0x10001, 0x5, 0x101}, {0x9, 0x6, 0x401, 0xf9}]}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 03:38:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1a9001}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 740.423778] binder: undelivered TRANSACTION_ERROR: 29201 03:38:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000040)=ANY=[]}) close(r2) close(r1) 03:38:11 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x480082, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x8, 0x6, 0x4, 0xff, 0x0, 0x1, 0x0, 0x2, 0x5, 0x2, 0x400000000000000, 0x7, 0x9, 0x7, 0x4, 0x1, 0xd3, 0x3, 0x7, 0x80000001, 0x6, 0x81, 0x6, 0x10001, 0x1, 0x200, 0x2, 0x22, 0x2, 0x7, 0x1, 0x5, 0x9a2, 0x9, 0x28f7, 0x6afcf48d, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x24c05, 0x0, 0x2, 0x3, 0x3ff, 0xffffffffffffffff, 0x80}, 0xffffffffffffff9c, 0xf, 0xffffffffffffffff, 0x3dbe11d3c7bff3d7) tee(r0, r1, 0x0, 0x5) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1c000) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000200)={0x3}) vmsplice(r2, &(0x7f0000001400)=[{&(0x7f0000000240)="dc3c7a78d04806445390b4566550ead580e59e9a4561abded08a961cd6eea0c47c3affc4a87da962de55b24db6e3c6115b30ea2bffffb1871754c52ab023a31c47e3d0672e7daa5db425161ffa1a2f69f17a6031cc310734de47439d1003ca459cc729aee3b1fb533e78be348fadc4a0872b98adcde0ae4aaf5422458ad8d9f20db48b6558559506816673b24b88aa66ce8d6872ddab51986f4be8df79b43cb63a5a051cba9ea1a2b46990e96591e8d51ddc28371df7e250e44899ffab811e1471ff19b6ed49f94c512a3ca91e47b079070d38c8e8978ca4c3", 0xd9}, {&(0x7f0000000340)="4380cfa26ebd043eec7df4658139ed537eb6760632eb8a98", 0x18}, {&(0x7f0000000380)="ab4308a49eb24953d05b38ef36e6d8504e80b0e8526b47fa80e798c4b765ec171f18fd1279825ce1d4d0a20aa9672f6809bb0dfeb50b691787740abca0240129384468fd2acbc61dd4642466d0236e1201ddf3bd57f79f63cdb07aa950d640ad75267d59c81eb621aa2885e4297864cd85c340b405d1cf1c77cf62aecfef896c12a9cb8438069fc3ba5c59452c137e8c61fb54ffeee19f82c03eca94bdcec3f3ff407d8f79d3d0a4330fd96cae3918998b51359e97350698c9269002fafd39be9a5f3bdb2a478dc5b3fb977071d060a2febf5db319c3628208fe27a1a1fc9cfd9ca154517889363d73117c131d7cdfc813ac475243c91e857931f6c04a7cdf5215ac3145f5cc0ba670d90fbb3d9c0f3d00af8cf189f9145bdbcb742f7859ec36abab0f6ab802721b089e8a87c96e425bcd0bf521573b9a9e002e20f1fd1b1dbb6af906bc4a9b8f5761d786d18e4f1b5be5c340c203b4d781143b297dfa126a519d4d3595ee2b89a378a68db624c9a689b3b97a0d0d1f83070c7fa96b82c3bec5796493ca4a22a7bdbd3b4b9cae949806167488213786bc8389cbb8893057127d3de912a8c41891c226dd86ad6424fd419d5cf4a3a599cdead39d0154cce0064aa1bf2f7de235450a630fc3572ba8e0ebbaed9db3995fd73b895483c3091e9d4151486eb1d65e4d3a5cfb0bdb2d0655f193a223bac52ad4bee7d9df0a7b90598b1aac1b923b2343d3c12f6c50c667377df4b7619ad5de329c8e46f6ebe375b906205194d48b88a5957aef3c74492e46362ff7fd39a76120b9cb82a697bf9256d9e772cf15399abb6a416eec2430ea981120ec32f30fc852055d94c3116a9915c69fee67df754c07a7dd4d2a5f63d262b8d24d3688013626098a116b441c10e0c5a1b0ccf48f6a0057d7ae8a52d3b22cc780876349d6b33a2f31c8f7ebc1afbdd04b7e72b2ecfda391e7ae3288ac9f69145b31a76aa0637b5f72a086d684a4d272671bb6bcc15cba781358812acc31ae8b0de173344eb152bdd9c5bd9347b515f3958671d6b938229198e39aafd788aaff3ca6485d9375e00e79268fc9aaf0f9553111329c8d95cf08cec1458e43942ae4dc4f4ab3c742bb0cf95132664dff25d1dc30928ce263a4e69826b767bc4418b8c67d04ad97ed0bae94a190dd71e52ce2d8834875c3dd9f94cb4895c3139e5b6a862fc512df581f359b372f37a10f3daebe513128c01a6fc2de6c5000ad79d616762bdff0d989a8e273527da3b850090d64e1b8ee8a73522ea8159835b25f6caed197d2232f2a080086f8a0886ef06d97c18643aee5650a9c06b899863adc0aa3938c417666c47eb8cd102b2d9a17f0066291c795952906f406ff57aaa02a2d862ce228c4dc4563c7f7bcc404ee8af627f0a1acbd57f66f0ff824616b27dfbc2c681da7a85d76bcac5d506ccb07ea05e8e94f4e0d76253706eb00d4f3eda73297b125b4d7365b80a2a6d015126f49dfcba40bcc2de90d4c1e1bbda95e0f2eebe0bf7ae32cebb99f2e3a1ceac08659866901352fdb0be52868a99f7dbde4c6d6bf85fb3e0ea0979c866dab5211546d297516a2c10036222be1650887f59ed88c326620ec0706f2b7fd09d45834766780f7670aff6a797e1f22d2afc6c6d1ff873904621a5f50ab2d1db04eac57c809395421a0ac0cbeeb944a6f731cd07307018e83f47a5376386a6831cac9041f50a3a991fb6bb6c26d6c5b06f8708f00fcd0c2549819c8ccbb329106714474bb80f0cf37f9d6b72edc9d3b75820f97b71a5277af53eb82719126a1d8f010221be4b007aadacf93a50008a35a90d9196a70fe611a90b9ee71f284aaa771d75898c01a99b268e27634f1d393fb28fae2431dd5ecad17401bdf3bca25e3d950f0132421806630509d650e4b3711d5ccc1493159c20f4992c250ecf3a28f386828aede1b07d1b898cca46fa06b48b33996a57e5206c461558942f12e2532976fd5f5c4aa6962f9acce6babd85023c03c14788e1f47756cb79758852db3c4628d38abfee25fbd4dd7dd3def3ff8664612c0f62373bf83e6b38b64de2030819eabbddfb1b5c0dfb51c3a6ee5fa48d481ca767ef66719d471eb45406b50dfae839b29df090934a30c86a43c1eeadaa79ea7f6d3272fc167091c05e237dd2433160b7d8724b214fef201d1e77c2e2c5972774bff25884493ec50355824b9d5b486bd73315a7760f2e1264f1878e78aaaff1b7783c546477cdb2cbebc97b8cb50bf2ce96d3a45c58e59d597124e4bc34a454577d0cf50899e0dd9ae1321baa8877ea0d3ac4f1a42125e5609e788f2dea2642c56d0e176cd2d868fcf282412463b5dc6a9df844af611918e3e968f104ae2dcf67e03e0a469e4462597880ad9126c0d81c36efff7207ca447c37c80edd653422072ff82be685bfb5b7775da76ada3b957662e2098896145e7e9ae90bf8638099449966ce31be0cbbc232c26e3041c2db541defeeece23d4dc64c45f8d228f75496d2967430e97be6cd74f693c9a2854f66fff0c7c51611315dbf076814c984fe67e8489b335087846780951e45ff62376979ba2cf1a3fffa313a3c47fbfcd2415bd70011dccf90caaf20a4a09edfcee73d6f874957e4052935a9b5ad22e4e6056e403c0b1f4197adb472938ef23b45b67605c80d7fb646ea17eaf1cc4153860980a44abb034d2cc4dc7fb6c339a5079bdc417eb7a293610fcc3c0fbb80d6e36400ac6b571f70e51ad6d7a61b5f32333cc0aa325610b9a34e38aa5d341eae839cfcaf4c7c2076a0f6798af70227d0fbc6acf511b8a8f20f3c800e71645bf61dd4ffde480265debb7ce2adadcb5f21ea7de890e40d546158d9a28ce047607c459412ecffd46633ada6c34e9f11352841cadf56b0bc6005c6e9caac78f61a2e03a14ec9373ccff37159f7aba11a602eb430cc52f3a4992eb25b2b45e0499b9e0c19af48e02bba38c2a45e37ef3a32e42684ef5c77a35c1d980b0e610f425b18ba3e547fe2736fc885d587591797e054459dede09b5d4afe71a4bc2c4576549962ba66785e5c56be8b5a3faa368f1789bf6d4c965bc0ca216f91b653fe3f6de996bf0418a5e32f70462ceb95b78c709cd9b1fae440c7a0051e4e9bfbcc524ff3869ab9ddaf4af001973e3f7ab607bc968880c7c190e09d465c1184e21a24ec4e13b123ab0c7e9b715b0c2f024f95d801d28862f822f7737ee7af665b9ea2798ce1426e26ab2aab98c3b242232a717e315451cb02dc71ec207829de8b4d7c86694a58fac78297322fbb7e612843e3d045c38a1430d2bfc2d441ffe4d0a7998df0c7f8da33213562a5ea748deda4108b6e6960378f37cd1de78688f09430c1532a38cd6775c0a89cc804557004f4d8f4e058213e5537a7898109e3949eb12c517552ad86367bcebdd272d935414a8b65c6c0cc3420955ff046b8cc847be2327bf9db1b344ca838805afc0eb25b049d0f2cc0d42e8b520dc724997bd6a132da7156a247f226ef500937a2c2b12f7abe9d85ba0c9071eb1f0136ebbf292137075b42900925127c943dca0b38914bb553c9e3e9f0029252bf01fc7127383ecdd07ccb65d324de5f32686899be870c66ede4acc9b1eca07ccbe44ee6fc5caf57391ff1ce40f1177efce89d26e1b4d59d755d722fe74e0c702b89415c3b7ce28c9fd9fe1ac3586c43389e8e51349d92ac06cb687ea099be308596bb7f8cf16e35149cc0f28c5d27639df0cb9e49c79fa565e9a4f50824182230ae53b1cf01e90b1f07089196ea658207ab0adb018f35b9215b15a62f0089db14ed602dae1f158ad62971d07015145c5f98b2fb070463a62516a27eca67bbf004461855fa7fc1ad6fa5c96b2544110eb1d64d0a10c4fe49233eb6f480288d842a5e7aec5efef6a5cf5800401084fece31cd8c812b595fa04e911aafec9f80d336c59d6bb18c9f7b133d60a2fe08a875822f58296cbcefcb3e7d467d60b76595ff4786a725aa436ea6e17b37738f8beb6ccd7b8d167712b713dfa872961282081c4344aebbd3defa79c3713353925a7b0b9ce44d8b4dcc7854a1ac768dcb7b53b6b7762db7902c451593acbaecd744e8ec2e5a6dc1a02befa345e112cd8f39a95fce68f57cd5151c2bcf240defcfa6af645069d212f745dcdb64ca82a5d7cd2554ebfcfabfe236cf3722231e705231bf3dcad7e4bb8bc336163492e217ff4cd16a471f3beb9b3525094f4f7fe63038648ccc5a6dc60f74aa924ffdea997a8bb89832d0209ebf862aaa9881648ab6a44c420cd15411a039821b8628cc74411a4ece78865915973b822c487c35e43937b95381c1ac2e1c913c8a4ffe34d1795aa64cb6c8c3f01dffca3c951f8e7f9796c59f36ea59685525020c3c9b77d7f57aaaeca3a92ab647ae2a02567fb1a7a88f2635e64e8d4ff78922c46dad6135e5f5098cf81e0b75ca0bacf510178f9b5c1abdcc2f4134a4b3f71a29c25d6e978d4400cd2b0556ca7107650fa5143213d50e3691ece55aaa52628a69adff1b5bec4fc238a5bca55f0583e5a6d98f9deb021af5b3d33d2188429e4d9a9f90c3b83e82b755f93a64e629c0d7c2d7372f3f3f62eac235e569038b309b1ebe444793fe626912d08e297fbf0a83a1aae194d4ff0c8363a31de1bfc468b775b04ea0751491b939b23a7f73373b1fbb9d6698e1889d79d781738d5d794d5098cec7369d90294c0f6be7cc1bffc9f0e243ab2378e2881c7c89b0e998ee5712f8f3999fb70d1bc1241a2349486f0ae45a0c7cbbfcc6b3ac787934d47405e7fcbb2d065c51287bc5fbd3420019df72ac5025109b69ee6b7738d5117ac865853a2a3b9d783700e219f542d676eef822adfb9509c0fe2368b0de48b82bcded281b34a817aa4495dd1a79e69ba12e794cec4dead142ada6675b6f2cf337e32b7de89753400d595655d1bd3a00e4b1b497a3d1374a7d9afd177ed5a0670c151209742da3fa04ae68e8b2a93b2b623e28976c6a32bc24174aadc6b97cb2a110b59be5e87c3d877c9224516f509dcdc3f6939fd998cecf02a6c3df741196e60b367d41545e7f7e982e6a07c0e6cd6f1892ae46afd84ead66d604b61859d9bdcb909a6c40e03e44adf4ab205f5cba5f992f08f1bb8a6814565b596dddf56e44e981f1267a72d8e10d17058224fed24a6bbf9804352752ea8598e1df47bd7f602cab1bfcec5e69e214c494b82df1a91188c83fc1df39ca1d0fddd68140ef9c4edc03fa2eda971cd1b668de555477736e637c073a71a469cf52c3cc12f0c863db98b79c1149fb4c173892bff4537d386901fec87308bed2eb59740421f10e6ea5a8b8ceb1762e95e20aeefde4a9db07218d1c77191931e60dd9acaf7aaf9e95c5b490a3010a694e0810670ce67c762201a694ab32bf780a18998797d8349c72261062342e3f7a6c76fd955e29c8be768d0fcc1e40188b7dbebdfb193c3da64fc0ea593dbcf4e42fd29bd93f17969673496cd6143c0722850343aa880ec36d4e7a13f1e68ea20a3add28e81493100864e17c1491bcb3e10bba799a90ed03987c2fb3b91020d2fc6df08abed4e13b3f799b5fe6abfe409771e2d4acd11131eedb420fefdb38b578d9711a2baefaab6428e4bde6f8542b575319a87a0546de894bf7745b68c25777f0baf7ce89b7e632c87dbb1b53fc466a96a5f5a419e8d974f800de8738e2be962719ec3b8e0964d7755dadcb66ca567fef9415739fdc2d5206d51ea537abc130dc2aa3b6c719613b3fb44f017cf0ebdbabfbae77b27c036fbe152d247d32960f75636eff594502358", 0x1000}, {&(0x7f0000001380)="ab816056589f80774050423da3fca8b9f19303bf412801c2796bdb26759088de981b597ffb118371d399ff8844937840ef8cc0ca834b9f1a5680be76f613", 0x3e}, {&(0x7f00000013c0)="0b781c02770c93d73fcb788a4b6ee6017f965f60b335fa3e8d3a251d3c10794b261ffb009219", 0x26}], 0x5, 0x1) signalfd(r0, &(0x7f0000001480)={0x100000001}, 0x8) getsockopt$sock_int(r2, 0x1, 0x3d, &(0x7f00000014c0), &(0x7f0000001500)=0x4) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000001540)={0x1, r2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000015c0)={'vcan0\x00', r4}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000001600)="8a336f7b2ccdee8f116515197ea41617351a5fce3d8e45390b07a4115efa9502af03eee6fd9c7d1c516d87beb12c6ec37f2d49e5e7c05e93bd8b003f59785e168eacee773115a4370eb29fcb9698c240b7bf2f671e9ae0ed16147a81622496dda1069c8c7115d50fd2ecd2e9c92bff14db9289e2a101c7eb64aee28aa3b7b74b24d43793d304083d1875b7494e5b13a93f7b6c2d22680471b33fe3c26398e7178e21d9ef20feff82391e1ede02ef4a428f435ae05a70b73ae5e5a1b40164a0f53722fba6f9e909") shutdown(r3, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000001700)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001740), 0x1) getresuid(&(0x7f00000017c0)=0x0, &(0x7f0000001800), &(0x7f0000001840)) stat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_fuse_mount(&(0x7f0000001780)='./file0\x00', 0x4001, r5, r6, 0x7f, 0x8) lookup_dcookie(0x100, &(0x7f0000001940)=""/4096, 0x1000) fchdir(r7) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002940)={r4, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) setuid(r5) socket$bt_cmtp(0x1f, 0x3, 0x5) pipe2(&(0x7f0000002980), 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000002b00)={@un=@abs={0x0, 0x0, 0x4e20}, {&(0x7f00000029c0)=""/234, 0xea}, &(0x7f0000002ac0), 0x25}, 0xa0) socket$can_raw(0x1d, 0x3, 0x1) 03:38:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1c000000}}}, 0xd8}, 0x1}, 0x0) [ 740.529637] binder: 17846:17848 ERROR: BC_REGISTER_LOOPER called without request 03:38:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:12 executing program 4: r0 = socket$inet6(0xa, 0x8, 0x20000000010000) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x208000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x6, 0xffffffffffff7fff, 0xfffffffffffffff8, 0x5, 0x12, 0x3}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x58}, 0x1}, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x2, 0xb0) 03:38:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8000000}}}, 0xd8}, 0x1}, 0x0) 03:38:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1) fallocate(r0, 0x11, 0x2000000, 0x2) pwrite64(r0, &(0x7f0000000080)="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", 0x1000, 0x0) 03:38:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 741.309745] binder: 17846:17896 BC_FREE_BUFFER u0000000020001000 no match [ 741.316833] binder: 17846:17896 got transaction to context manager from process owning it [ 741.325210] binder: 17846:17896 transaction failed 29201/-22, size 0-0 line 2843 03:38:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xeb0d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80200) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) writev(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)}], 0x1) 03:38:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1d}}}, 0xd8}, 0x1}, 0x0) 03:38:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000080)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x100}) setpriority(0x1, 0x0, 0x0) 03:38:12 executing program 4: listxattr(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000100)=""/186, 0xba) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f0000001bc0)='./file0\x00') ftruncate(r1, 0x0) write$sndseq(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) socket$rds(0x15, 0x5, 0x0) close(r0) 03:38:12 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 741.445970] binder: undelivered TRANSACTION_ERROR: 29201 03:38:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = mq_open(&(0x7f00000000c0)='threaded\x00', 0x3, 0x10, &(0x7f0000000540)={0x5, 0x839, 0x9, 0x1, 0x6, 0x101, 0xffffffffffffeb4c}) ftruncate(r0, 0x8) r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\x00', 0x762c) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000580)=0x100, 0x4) write$cgroup_type(r1, &(0x7f00000012c0)='threaded\x00', 0x9) preadv(r1, &(0x7f0000000580), 0x1c7, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x8, &(0x7f0000000480)=[{&(0x7f0000000200)="1d29c23053787397232c340747894e359710202865ef16dc3261d0875f4b97954ac9bd19133cf161e13a34ee0c59ab197ceb46b7cefb97928b7756b05226fc2e87333808635116206b19f266f1d9925da553cf8daf35a25b5c", 0x59, 0xb74}, {&(0x7f0000000280)="847c3c24ec68a934875fa5eb8f97a94f79973fbb15d8e56768386fbda73a218664c77029265c134a6f3bf7", 0x2b}, {&(0x7f00000002c0)="bd868cabf1e1ada4df232c4a590bdf44a62d9081358370d9739a220d157a646a705d0f50ff2d78002b8719f14fe05e6f0de3496198af822011fde2", 0x3b, 0x1}, {&(0x7f0000002600)="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", 0x1000, 0xd9}, {&(0x7f0000000300)="338d", 0x2, 0x2}, {&(0x7f0000000340)="ead78006824bee0724233827fb77a4263735e138ecf249e3ee0e349584035d53f94b5b1f23fdb1b4f45e63d52f565371f9dee4e3546148ad261e691601f6afeae600129fe75b3644f812c7a1f67c9f6645cbd8499b62dce5ba3071335ece64c52ba13428a5e3cf6526013356db1f6622b5e3df2ab156dc1390ccedabc51cd9699343741ea35fea9e9b87e9e317c9f3d5e73b607ab03e05d9f1e0dbbce149555c8ad178984a426acff062b83260998d", 0xaf, 0x9}, {&(0x7f0000000400)="223c6f2c7a96c968906c58e46c42241fed5f3900ce13d512f6bb8a7bfa9b2368d8fd", 0x22, 0x6}, {&(0x7f0000000440)="1b7366e1a0d6fddb9c520ff8bad842bd5e6912142a", 0x15, 0x531d}], 0x2000000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 03:38:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1400000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)={{0xfdfdffff}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101205, 0x0) [ 741.527241] binder: 17914:17915 ERROR: BC_REGISTER_LOOPER called without request 03:38:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086607, 0x800000) fsync(r0) 03:38:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x20000000000000, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl(r0, 0x5387, &(0x7f00000000c0)) socketpair$inet(0x2, 0x5, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000180)={0x7}, 0x1a9) 03:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1200}}}, 0xd8}, 0x1}, 0x0) 03:38:13 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) recvmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/148, 0x94}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/240, 0xf0}], 0x1, &(0x7f0000001e40)=""/74, 0x4a}}], 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xc561, {0x2, 0x1, 0xa5, 0xd8f, 0x9, 0x2}, 0x100000001, 0x7}, 0xe) socketpair(0x3, 0x800, 0xffffffff, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x2, r0}) accept4(r0, 0x0, &(0x7f0000000100), 0x800) [ 741.738181] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 741.746452] FAT-fs (loop5): Filesystem has been set read-only [ 741.823333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 741.839806] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 741.856373] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 741.887341] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 742.306178] binder: 17914:17962 BC_FREE_BUFFER u0000000020001000 no match [ 742.313216] binder: 17914:17962 got transaction to context manager from process owning it [ 742.321712] binder: 17914:17962 transaction failed 29201/-22, size 0-0 line 2843 03:38:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:13 executing program 4: r0 = socket$inet6(0xa, 0x800000000000001, 0x1) ioctl(r0, 0x400000890f, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setgroups(0x3, &(0x7f0000000080)=[r1, r1, r1]) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200400, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x6, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e21, @rand_addr=0x8}, 0x24, 0x8, 0x7, 0x4998, 0x6, &(0x7f0000000140)='veth0_to_team\x00', 0x5, 0x100000000, 0x20}) 03:38:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x301b2c7632d564ed) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) exit(0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a30de34c0f694229d62a26a1a53cd3fa52f04db84bb18255ed50684304ac04395fbc0e5c557b0d1a4f5bd43b252a3691cdc61b32f630a39b52bf95287a45b3742212afbabd7350a6b0b63d3bc58386f6993281b18f511265f64a8da85b1406270d060c544f9dc871c969b01bb5a22faf25431290cf89bdbf24235e8435002fa2b1e544a33ba7a1b6fe308dbc9ce1842dcd07420247d29f20944a26d33bd9d4876b279b4b273fedf760d4107660576dc9ec880bc318cfc24c385015dde48eb444f5a536659660d7e0b4c90"], 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) 03:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x7ff}, 0x5c) 03:38:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1c}}}, 0xd8}, 0x1}, 0x0) 03:38:13 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x152}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 742.440783] binder: undelivered TRANSACTION_ERROR: 29201 03:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:13 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x2000009) syz_fuseblk_mount(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10100) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x401, 0x1, 0x2}, 0x10) read(r0, &(0x7f0000003380)=""/4096, 0xf) 03:38:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1700000000000000}}}, 0xd8}, 0x1}, 0x0) [ 742.527863] binder: 17979:17981 ERROR: BC_REGISTER_LOOPER called without request 03:38:14 executing program 4: clone(0x204000, &(0x7f00000000c0)="368b0f749f386ea5fa609d5f0b760ad36c5cbd806d43db72795a8e26d216b54eee72095a8931f8f432c0f1238b8c7f67e87f219bc912c426c746a6c26906b206e5507ce9cbf76942e6316c79c87b29a0c8ec5fab89cb211372f97875d0c527a1ce53db9d067d98eafe6e8313fe565a16e23ba62e452766b5bba525c8a715d0d302aa3fc94870a700d51c1509c1c141c35e04", &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) r0 = memfd_create(&(0x7f00000002c0)="0085345dbd41c3018bc92a20cd958dbb2286db4ec36463e1de64852625880537d79d2021cdb9b17709c0047fd7bd1d226f4d5069ad4208ecdae34d4a193cb998f8846dfef0ede9e0ff5bb000f19986f26aaf920255e4a1e1411c4e8dffffbfd52242", 0x3) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x2, r2}) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000180)={0x7, 0x10, 0x0, r1}) mkdirat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x1ff) 03:38:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x600000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x60, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) 03:38:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:14 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000200)="8af328ff0f0000166eca9722fe", 0xd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'system.', '#em1#+\x00'}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) [ 743.306996] binder: 17979:18028 BC_FREE_BUFFER u0000000020001000 no match [ 743.314138] binder: 17979:18028 got transaction to context manager from process owning it [ 743.322561] binder: 17979:18028 transaction failed 29201/-22, size 0-0 line 2843 03:38:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1000000}}}, 0xd8}, 0x1}, 0x0) 03:38:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20}], 0xa, "9842d9b7e5c1b2c4fd2de5f04a"}, 0x23) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000080)=[@cr4={0x1, 0x200000}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) prctl$getreaper(0x5, &(0x7f0000001080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000013c0)={0x0, 0x3}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000005c0)={r3, 0x5, 0x1}, &(0x7f0000000600)=0x8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000, 0x3, &(0x7f0000000f40)=[{&(0x7f0000000080)="a82efa99645638fe1ff534e6dde3f4b8db87d9ca1a561024b769c65463cb29a338493b793cd8cbdfe0f06f694d4b4818baa9055a20a5b9c211bbc50c3235bad5dfcd2a13b1c23712dea0426462b94a379acedc568631240a9de31812949ab42b3770ab633541c3d10f6d823a0e21758d646c1c6705cd1899a7e98a9b813c325929531b9be39be347f958d5eca8d7924549000b541bbc1e69e90afc060d292f966cf2201d0421a1dfe33428f5dba90eea1a85e45f543ddb70eb526f", 0xbb, 0x6}, {&(0x7f0000000d40)="1ee1d5311ba2277d250559532fb49d1ef765070962f44f690571688be2520c0d1a171384286e6b65a652bfe13174567b40858fdca4ea89e92eb0c37e9383e50e874f15da27afeb40b200175567210200d095af540a7c01a534c607e98723bd004b2fdaa0376c1ae678aa89b2684a967605806636e0bfb2fe8336", 0x7a, 0x4}, {&(0x7f0000000300), 0x0, 0x10001}], 0x20000, &(0x7f0000000fc0)={[{@nouser_xattr='nouser_xattr', 0x2c}, {@data_journal='data=journal', 0x2c}, {@usrjquota_file='usrjquota=syz', 0x2c}, {@errors_ro_remount='errors=ro-remount', 0x2c}, {@noquota='noquota', 0x2c}]}) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r4, 0x40086602, &(0x7f0000001540)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000ec0)=ANY=[@ANYRES16=r1, @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=r2, @ANYRES32=r3, @ANYPTR64, @ANYBLOB="06133080c940aa50f3a7b3c6b02d4842ec58f74f55e39cbb340173e7caa56e83a18933c9f5cf4df3486180c95511cfdcf9c5f47e536df6e606ef7ab76bd6140fb1e425a028601a862282e31acaab0f8bec46e6678bdd74e5ed35fd1497b6a43956f594d413200f2e039de31e8ca5b78bb383fe8aca531444de7c80689763"], @ANYBLOB="60461a989bf066f3238948b713a8b1c37641ab22c9448dc28611ea1449f3b036290b4ebe6a5af397abf0e9bf74a30ee6961979013206c8d8f82c58167ef7af987609c44edf32e15cc11926fa234e5e9b44d7bb2c3bc8a998952ecbdbc5afb3ec5b8904b264395d875e262ecc6fa0"]]) syz_genetlink_get_family_id$ipvs(&(0x7f0000001300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000016c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30200020}, 0xc, &(0x7f0000001680)={&(0x7f0000001340)=ANY=[@ANYBLOB="1c400000", @ANYBLOB="10002cbd7000ffdbdf250e00000008000500aaf6ffff"], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001480)='tls\x00', 0x4) chdir(&(0x7f0000000500)='./file0\x00') ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x2000400) lseek(r0, 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000001440)=0xffffffffffffff74) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r6, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/89, 0x59}], 0x2, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)) 03:38:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:14 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:14 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007840)={{{@in=@remote}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000079c0)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000007ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) [ 743.440112] binder: undelivered TRANSACTION_ERROR: 29201 03:38:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1a000000}}}, 0xd8}, 0x1}, 0x0) [ 743.527775] binder: 18048:18049 ERROR: BC_REGISTER_LOOPER called without request 03:38:15 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xebe16f440afb06fe, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x3) 03:38:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x3e, &(0x7f0000000080)=[{&(0x7f0000000300)="033dc04426789e794596d5e652ca9445656820f7e36943811309082cb8b80f2374c4713d2c1a70b1547f3a322dfac8b1b7d9f9be139bdc9f949b63fc973333562947c6f00f421639098a2d32d35221ebdadb3af5d65e8cc9c371eb9c9d982c092b01fcb8dd1345add751a57a975d7430612878c238e8575c73799e2a6156e3c849c58032ea9468196ed6b060261c35585ff7c1bc617efa6b6071fddddcc5828190c2f89b04a038158aa69422de30fbe006846e542fea71b91b4476c2e9d61d470d4b587a6bd965e3605dfe5855268c0c10971e3b399a5ab433d22bdae0775e3d8a53ef5af9d5a952d1873ef1d7e3", 0xee}], 0x1, &(0x7f0000000440)=ANY=[]}, 0xc000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x101440, 0x4) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x7) accept(r1, 0x0, &(0x7f0000000200)) 03:38:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1b000000}}}, 0xd8}, 0x1}, 0x0) 03:38:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000040)="7472db3dd0e90b90b50000000000086ac574e23670d4a5c93f70207f6355dc054aa7", 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x205, 0x6, 0xf0, 0x108c9869, 0x7b42, 0xfffffffffffff000}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync_file_range(r0, 0x0, 0xa, 0x7) 03:38:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4000}}}, 0xd8}, 0x1}, 0x0) 03:38:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000005, 0xd82c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x2, &(0x7f0000000240), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000110000000000000000006263736630000000000000000000000076657468305f746f5f626f6e6400000079616d300000000000000000000000007465616d5f736c6176655f30000000000180c2000000000000000000aaaaaaaaaa000000000000000000a80000002801000078010000636c75737465720000000000000000005a0347f1c9eb10dd66935d00000000000000000000000000001000000000000000000000000000000000000000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000004c4544080000000000000000000000000000000000000000000000000000fbff280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000700000073797a30000000000000000000000000000000000000000000000000000000000000000015000000feffffff000076657468305f746f5f627269646765006970646470300000000000000000000073797a5f74756e000000000000000000726f736530000000000000000000000060f9a9d474aa000000000000ffffffffffff00000000000000007000000070000000a00000004e46515545554500000000000000000000000000000000000000000000001a000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff000000000000"]}, 0x32b) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xaf, @loopback=0x7f000001, 0x4e21, 0x2, 'lc\x00', 0x3, 0x1, 0x7f}, 0x2c) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001540)="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", 0xffffffffffffff70) [ 744.319131] binder: 18048:18097 BC_FREE_BUFFER u0000000020001000 no match [ 744.326336] binder: 18048:18097 got transaction to context manager from process owning it [ 744.334763] binder: 18048:18097 transaction failed 29201/-22, size 0-0 line 2843 03:38:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) rt_sigsuspend(&(0x7f0000000040), 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = dup(r2) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000000)={0x9, 0x8, 0x100, 0x3}) ptrace$setopts(0x4206, r0, 0x680b, 0x100016) ioctl$TIOCSBRK(r4, 0x40044591) 03:38:15 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xc88a, 0x40000) write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000100)="fd", 0x275, 0x4) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) fcntl$setsig(r0, 0xa, 0x36) 03:38:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x7}}}, 0xd8}, 0x1}, 0x0) 03:38:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x200, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @broadcast, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x4a, r1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4000000000000009}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x585) 03:38:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@broadcast=0xffffffff, @loopback=0x7f000001, r1}, 0xfe89) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@rand_addr=0xf81a, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, 0xc) r2 = dup2(r0, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)="02e71412", 0x4) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x1b, 0x7}, 0x14) modify_ldt$write2(0x11, &(0x7f0000000080)={0x7ff, 0x0, 0x1000, 0x80000001, 0x0, 0x6, 0x8, 0xfffffffffffffff8, 0x101, 0x401}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0xc, @rand_addr=0x1, 0x4e20, 0x3, 'fo\x00', 0x12, 0x2, 0x8}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x3, 0x2, 0x0, 0x7f}}, 0x44) ioctl$VT_WAITACTIVE(r2, 0x5607) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x1000, 0x600c00) 03:38:15 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x57}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 744.458771] binder: undelivered TRANSACTION_ERROR: 29201 [ 744.498219] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 03:38:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 744.513161] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 744.535476] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 744.578193] netlink: 'syz-executor1': attribute type 3 has an invalid length. 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6}, [], {0x95, 0x6}}, &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) sendto$ipx(0xffffffffffffffff, &(0x7f00000002c0)="f41f07c101732891cb296bb9892c5198", 0x10, 0x0, &(0x7f00000003c0)={0x4, 0x0, 0x0, "21ef89471301"}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="260000000000000000000000000000000000000000000000ebb978927322f0962db8686732ffc4fbea35c6a084018b88f8e22daa01002b616a863c3f823e32d3b9735d3754c53d42cee4e9983b93a804c6cb4216d62c2e83cd622f5b566813205d000096ca14c671e6fb69af3d977bba"]) dup3(r0, r1, 0x0) 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 744.707777] IPVS: ftp: loaded support on port[0] = 21 [ 744.718689] binder: 18114:18115 ERROR: BC_REGISTER_LOOPER called without request 03:38:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1000000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 745.340911] IPVS: set_ctl: invalid protocol: 12 0.0.0.1:20000 [ 745.351684] binder: 18114:18150 BC_FREE_BUFFER u0000000020001000 no match [ 745.365323] binder: 18114:18150 got transaction to context manager from process owning it [ 745.373796] binder: 18114:18150 transaction failed 29201/-22, size 0-0 line 2843 03:38:16 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x8, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x5, 0xfffffffffbfffe8b}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={r0, 0xffffffffffffff87, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) 03:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:16 executing program 1: r0 = socket(0x5, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x48}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:38:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1100000000000000}}}, 0xd8}, 0x1}, 0x0) [ 745.446165] IPVS: set_ctl: invalid protocol: 12 0.0.0.1:20000 03:38:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) [ 745.533561] binder: undelivered TRANSACTION_ERROR: 29201 [ 745.754356] binder: 18171:18172 ERROR: BC_REGISTER_LOOPER called without request [ 746.303391] device bridge_slave_1 left promiscuous mode [ 746.309055] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.323135] device bridge_slave_0 left promiscuous mode [ 746.328678] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.389443] binder: 18171:18192 BC_FREE_BUFFER u0000000020001000 no match [ 746.396547] binder: 18171:18192 got transaction to context manager from process owning it [ 746.404966] binder: 18171:18192 transaction failed 29201/-22, size 0-0 line 2843 [ 746.529678] binder: undelivered TRANSACTION_ERROR: 29201 [ 748.376599] team0 (unregistering): Port device team_slave_1 removed [ 748.386617] team0 (unregistering): Port device team_slave_0 removed [ 748.396456] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 748.416346] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 748.445804] bond0 (unregistering): Released all slaves [ 748.772956] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.779380] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.786688] device bridge_slave_0 entered promiscuous mode [ 748.825309] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.831720] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.839209] device bridge_slave_1 entered promiscuous mode [ 748.877064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 748.913829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 749.026155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 749.068092] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 749.249320] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 749.256931] team0: Port device team_slave_0 added [ 749.295187] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 749.303450] team0: Port device team_slave_1 added [ 749.340974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.383576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 749.425373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.465796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 749.473325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 749.481855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.840517] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.846952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.853605] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.859994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.867420] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 750.495143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.742738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.829977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 750.914566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 750.920796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.928575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.008675] 8021q: adding VLAN 0 to HW filter on device team0 03:38:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001280)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)) pipe2(&(0x7f00000010c0)={0xffffffffffffffff}, 0x800) connect$ax25(r1, &(0x7f0000001240)={0x3, {"cb8afef9fda5d5"}, 0x9}, 0x10) syz_fuse_mount(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x7fffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002700)=""/21, &(0x7f0000002740)=0x15) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001180), &(0x7f0000001200)=0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14}}, 0x8) connect$pptp(0xffffffffffffffff, &(0x7f0000002300)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) readv(0xffffffffffffffff, &(0x7f0000008fe0), 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000002780)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001080)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) read(r0, &(0x7f0000000000)=""/4096, 0x1000) bind$can_raw(0xffffffffffffffff, &(0x7f0000001140)={0x1d}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 03:38:22 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x3}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:22 executing program 1: r0 = socket(0x40000000004, 0x80000, 0x2) connect$rds(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x406080, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) r2 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0xfffffffffffffff8) keyctl$get_security(0x11, r2, &(0x7f0000000340)=""/185, 0xb9) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x1, 0x860d}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000240)=[0x2, 0xffffffffffffa1ec]) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 03:38:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:22 executing program 4: r0 = socket$inet(0x15, 0x80005, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000240)=[{0x10, 0x114}], 0x10, 0x4}, 0x0) 03:38:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:22 executing program 3: setrlimit(0x40000000000008, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) capset(&(0x7f0000001140)={0x19980330}, &(0x7f00009b3000)) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x25dfdbff, {}, [@typed={0x8, 0x1, @ipv4=@multicast1=0xe0000001}]}, 0x1c}, 0x1}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r3 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) fcntl$dupfd(r2, 0x0, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000080)) 03:38:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 751.542691] binder: 18444:18446 ERROR: BC_REGISTER_LOOPER called without request [ 751.559732] Unknown ioctl 4707 03:38:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d5500ff1febe34f73eea0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x10000) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x1}) sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3e552afd5921c487b3e07553e4fea738", 0x10}], 0x1, &(0x7f0000000340)}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/129, 0x81}], 0x1) 03:38:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1900}}}, 0xd8}, 0x1}, 0x0) 03:38:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000009540)=[{&(0x7f0000008000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "48c02fdccc5627337954cfba35bea61cdf3062fcb4ec19c4fb2805a6871b29f402064e5a5824d98bcb8f0b24563444f38f52af5cafc6aecbce86aa77cee572"}, 0x60, &(0x7f0000009380)=[{&(0x7f0000009340)='V', 0x1}], 0x1, &(0x7f0000009400)={0x10}, 0x10}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}}}, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)="97", 0x1}], 0x1, &(0x7f0000001400)}, 0x0) 03:38:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x643, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x218, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x6, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x30, 0xaec, 0x8, 0x9de, 0x0, &(0x7f0000000040)='tunl0\x00', 0x5, 0x94e2, 0x82}) r3 = dup(r0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x20, 0x9, 0x25, &(0x7f0000000140)="76aabf38881703a6e1e0e9f9f72808fa40183ffed61e556b04baaa8ca7e8751c54faf02247"}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) 03:38:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x643, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x218, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x6, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x30, 0xaec, 0x8, 0x9de, 0x0, &(0x7f0000000040)='tunl0\x00', 0x5, 0x94e2, 0x82}) r3 = dup(r0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x20, 0x9, 0x25, &(0x7f0000000140)="76aabf38881703a6e1e0e9f9f72808fa40183ffed61e556b04baaa8ca7e8751c54faf02247"}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) 03:38:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x34000}}}, 0xd8}, 0x1}, 0x0) 03:38:23 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x10080) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4a000000) [ 752.341087] binder: 18444:18491 BC_FREE_BUFFER u0000000020001000 no match [ 752.348160] binder: 18444:18491 got transaction to context manager from process owning it [ 752.356727] binder: 18444:18491 transaction failed 29201/-22, size 0-0 line 2843 03:38:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x84, &(0x7f0000e68000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getpeername$inet(r0, &(0x7f0000000100)={0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) 03:38:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1ab440) r1 = memfd_create(&(0x7f0000000080)="74086ebf000000e5ff1c008c00", 0x2) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x8, 0x400, 0x8, 0x4dc8, 0x1, 0x9}, 0xfffffffffffffffd}, 0xa) 03:38:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8100000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x643, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x218, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x6, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x30, 0xaec, 0x8, 0x9de, 0x0, &(0x7f0000000040)='tunl0\x00', 0x5, 0x94e2, 0x82}) r3 = dup(r0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x20, 0x9, 0x25, &(0x7f0000000140)="76aabf38881703a6e1e0e9f9f72808fa40183ffed61e556b04baaa8ca7e8751c54faf02247"}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) 03:38:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x7ffff000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$cgroup_int(r0, &(0x7f0000000140)='io.weight\x00', 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xe43, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) sendfile(r2, r2, &(0x7f0000000000), 0x8000000000100) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000180)={0x0, r4}) 03:38:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:23 executing program 1: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x101000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x105000, 0xf, 0xffff, 0x0, 0xc7bc, 0x1ff, 0x3, 0xfffffffffffffffc, 0x7, 0x1, 0xa162}, {0x6000, 0xd000, 0xc, 0x4, 0x7, 0x0, 0x4, 0x9, 0x81, 0x10000, 0xfffffffffffffffa, 0xfffffffffffffffc}, {0x1, 0x6000, 0xe, 0x8, 0x2, 0x1000, 0x80, 0x80000001, 0x9d7, 0x1, 0x10000, 0x8000}, {0x0, 0xf000, 0x4, 0x1, 0x2, 0x9, 0x2, 0x2, 0x7, 0x3, 0x3, 0x1}, {0x17001, 0x0, 0xd, 0x8, 0x100000000, 0x0, 0x60b4, 0xfffffffffffffff7, 0x5, 0xffffffffffffff81, 0x7, 0x1}, {0x6004, 0x100000, 0xe, 0x3f, 0x84, 0x4, 0x4030, 0x40, 0x3, 0x4, 0x3f, 0x554}, {0x4, 0x2000, 0xf, 0x9, 0x4, 0x2, 0x7, 0x2, 0x80000000, 0x400, 0x626, 0x7ff}, {0x100000, 0x3000, 0xc8a6b634e356fdc9, 0x0, 0x45, 0x1000, 0x100000000, 0x3, 0xfff, 0x3, 0x1000}, {0xf000, 0x2000}, {0xf000, 0x5000}, 0x40008, 0x0, 0xf000, 0x8, 0xf, 0x9000, 0x4000, [0x8, 0x7, 0x0, 0x742b]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x1, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x80080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x80, @time={0x0, 0x1c9c380}, 0x1ff, {0x1506, 0x3}, 0x3, 0x0, 0x1}) fsync(r2) 03:38:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x643, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x218, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x6, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x30, 0xaec, 0x8, 0x9de, 0x0, &(0x7f0000000040)='tunl0\x00', 0x5, 0x94e2, 0x82}) r3 = dup(r0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x20, 0x9, 0x25, &(0x7f0000000140)="76aabf38881703a6e1e0e9f9f72808fa40183ffed61e556b04baaa8ca7e8751c54faf02247"}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) 03:38:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe000000}}}, 0xd8}, 0x1}, 0x0) [ 752.506860] binder: undelivered TRANSACTION_ERROR: 29201 [ 752.510736] IPVS: ftp: loaded support on port[0] = 21 03:38:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe}}}, 0xd8}, 0x1}, 0x0) 03:38:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x82, 0x20000000008, 0x3}, 0x2c) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x9, 0x6, 0x8000, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280)="fdc91cbca81988a25b954dfa1c41bfd731f5ad84ce401c72f7a8546766bef48fface5afc16dd68ce6e54ac0a2faa4eaa1908f09e2a1acf87614543e2f88e9d955ba332a40e40d5c0ec1a44b26f2aa98e8fe052", &(0x7f0000000340)}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) [ 752.645583] binder: 18524:18527 ERROR: BC_REGISTER_LOOPER called without request 03:38:24 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1001000000202, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d07000000761070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x6, {{0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, [], 0x17}, 0x6190e351}}}, 0x88) syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) 03:38:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x4e}}) close(r2) close(r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x1}) socketpair(0x10, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) 03:38:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x62cdaf07) 03:38:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) epoll_create(0x600000000000) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000280)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000011c0)=""/157, 0x9d}}], 0x2, 0x0, &(0x7f0000001380)={0x77359400}) 03:38:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8}}}, 0xd8}, 0x1}, 0x0) 03:38:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x7ffff000, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 753.394430] binder: 18524:18575 BC_FREE_BUFFER u0000000020001000 no match [ 753.401622] binder: 18524:18575 got transaction to context manager from process owning it [ 753.410157] binder: 18524:18575 transaction failed 29201/-22, size 0-0 line 2843 03:38:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xea0d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4000000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x10000000000000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0)=0x80000000, 0x4) 03:38:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000000000010000000000000000"], 0x28}}], 0x1, 0x0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xffffffffffffff81, @mcast2={0xff, 0x2, [], 0x1}}, @in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x8}, @in={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x8}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x6, @empty, 0x7fffffff}, @in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x100000001}, @in6={0xa, 0x4e23, 0xfffffffffffffffe, @loopback={0x0, 0x1}, 0x3}], 0xc8) 03:38:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)) 03:38:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 753.559160] binder: undelivered TRANSACTION_ERROR: 29201 03:38:25 executing program 1: 03:38:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x700}}}, 0xd8}, 0x1}, 0x0) 03:38:25 executing program 3: [ 753.663006] binder: 18597:18598 ERROR: BC_REGISTER_LOOPER called without request 03:38:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='dev ', 0x2000000000000003) fcntl$addseals(r0, 0x409, 0x8) 03:38:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:25 executing program 5: 03:38:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000002200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)=""/200, 0xc8}}], 0x1, 0x0, &(0x7f0000002540)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x800000000100000, &(0x7f0000000280)) mount(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='.', &(0x7f0000000440)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:38:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) 03:38:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x19}}}, 0xd8}, 0x1}, 0x0) [ 754.452742] binder: 18597:18633 BC_FREE_BUFFER u0000000020001000 no match [ 754.459821] binder: 18597:18633 got transaction to context manager from process owning it [ 754.468530] binder: 18597:18633 transaction failed 29201/-22, size 0-0 line 2843 03:38:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 03:38:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:26 executing program 4: r0 = socket(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r1, 0x800, 0x70bd28, 0x25dfdbfe, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x9}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x34}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x0, 0x5, @dev={0xfe, 0x80}}, @in={0x2, 0x0, @rand_addr}], 0x58) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) 03:38:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x160, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000040), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ipddp0\x00', 'veth0_to_bond\x00', 'ifb0\x00', 'bpq0\x00', @random="509a75facd82", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa0, 0xd0}, [@snat={'snat\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x1e8) 03:38:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x3}}}, 0xd8}, 0x1}, 0x0) 03:38:26 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x152, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 754.587388] binder: undelivered TRANSACTION_ERROR: 29201 [ 754.617998] kernel msg: ebtables bug: please report to author: Wrong len argument 03:38:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x17}}}, 0xd8}, 0x1}, 0x0) 03:38:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x509, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac14ffaabe78f0e5039188f032e000000100004e2070fa3489be0d3553fc1481dcfa8f4f620b78ce0b1cc5395daa39c637954417323346a4671cde1b8d080bdbaffd218c1256eeb31a0a494d7fccfea2b89a8fe7886f56c8ab73a5e1cc18bd25845367a18d5606f994210eadffc1234ce66598d12a000000000000000000", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="5010000090780000"], 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/217, 0xd9) 03:38:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r4, 0x7ff, 0x8}, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8b}]}) 03:38:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xfffffffffffffe65, 0x0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000140)="3e627f25f2e90e7b63b76c6b4b975148e2c8dbba40d522086a17752c44ab82f8c881b1dd7d86f453cfc88d49d5336ad3dec84babe217a1414071d191199430d46d5cb3c8ff9b0b97"}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) [ 754.678239] binder: 18651:18652 ERROR: BC_REGISTER_LOOPER called without request 03:38:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept4(r1, &(0x7f0000000280)=@ipx, &(0x7f0000000380)=0x80, 0x80000) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000003c0)=0x689, 0x4) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="15e0f823ba4ebbd0", 0x8}], 0x1, &(0x7f0000000280)}, 0x100000000000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) getpeername$packet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000440)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x51, r4}) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/121, 0x79}], 0x1, &(0x7f0000000c40)=""/70, 0x46}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="f676da215f4d53cd0e4392f2b3c110431e99da07a9c7d343b5519026ff105ac16890edd40da683f39b003850382ecc6924ecb6a0abd49459e27bbba4df2266679e5e2368daea6e377eda9e6663af8fca760a50ec7cc7087c8ee0d3ad218fbb59748aedc2609bd8d88f08dfc65a409c6f433bceaf8bc4ced821bc920c45e4cec7640cc19a0cdd7c3bd63b223375992a502156c4d7cf4ae461794e3539cd6401d694919f46180acb80898acf5f874f7a6086e3c431bb9aca08f676021f75c9c49332cf893ae469353cca268fa8572dd171339a9f3273d6a401d512a895ce36a04f0266d16d5110", 0xe6) 03:38:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="00001e00564b000000000e00000021b01ad3a6d5fb68fb6708739ff1eb6e8e1d8c84282a0794bbef5ca8c0c3b746f3659719e677efb15cabf996b9aa6758386210a2535d19f2e9ef101e54b1c71e1cacd02065945101eb1776959db1dc84bfd281e327980b109b4ec5e01808f427883ddf59d216512d9ac5a38b"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae99, &(0x7f00000001c0)) r4 = dup(r3) ioctl$BLKRRPART(r4, 0x125f, 0x0) 03:38:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb000000}}}, 0xd8}, 0x1}, 0x0) 03:38:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 754.809508] binder: BINDER_SET_CONTEXT_MGR already set [ 754.837209] binder: 18668:18669 ioctl 40046207 0 returned -16 [ 755.462888] binder: 18651:18704 BC_FREE_BUFFER u0000000020001000 no match [ 755.469922] binder: 18651:18704 got transaction to context manager from process owning it [ 755.478304] binder: 18651:18704 transaction failed 29201/-22, size 0-0 line 2843 03:38:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x3f, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="e612a406c6160bda1e396d31feb7192d15f5e54310ffb9b8b7618d27051ef4af131738bed8bd9ebe9c2999fb9e6ab70b9d6b416ca11d00dfd043ae68dadab821206fcae72cde5175997a26fb1f40d5948ce3289ae3def4f74c651bc8f6a18123f521f4bae1efe2f2ab15700c0cfc2f473c0c2acd8339b5e95cd3498286c44c0148d1e0bb97085b8c7e582b94dde054ee0148e18c55f0ffc023319d6e346a6bfd69e52df787702004acac36e1093c81a979dd3fb4d77fb1d27e31527e0bf3e5f5542510de9a81a5088fdce9b8d1e07457e7ec69f558a206df00096c4d2c8e179c1f9a391a12902a67e57d"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000040)=0x3f) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x208000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={r1, 0x7f}) 03:38:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000380)={0x7b, 0xbff, [0x4b564d03, 0x1, 0x4d0]}) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000040)={0xfff, 0x0, 0x10000}) 03:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1c00}}}, 0xd8}, 0x1}, 0x0) 03:38:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') setsockopt$inet6_buf(r0, 0x29, 0xfd, &(0x7f00000000c0)="29bec592c06df1641c", 0x9) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/1) write$cgroup_pid(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00e5"], 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x0, 0x8001, 0x0, 0x6, [], [], [], 0x6d, 0x511, 0xffffffffffffff81, 0xfffffffffffff001, "d8d3f1bd6b2891c5a1a8a3933146f5a6"}) linkat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x1000) 03:38:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:27 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xc071, 0x6000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, r1}, 0x14) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) 03:38:27 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 755.596873] binder: undelivered TRANSACTION_ERROR: 29201 03:38:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}}}, 0xd8}, 0x1}, 0x0) 03:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:27 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x400002, 0x0) sendmsg$alg(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="2afee4cf66fc8fd9172ab7a5bcef6ee999060cbee1129a03c84ef3bb94f8c89d216083c45daaf5c3e60c6249ff7b671ad51d05c8fc58d70800c470c1e8d1ced0d4c3fade31bee3bbf33838f4fa18fde0db711e7eccf17343b20f00a902c08bd092bbe6180ffd05beb68830f5b38b1fa84284ee0a5c5cc318c8185826ac13efc2c2656d4f9c233cb45c79f04c5f748e1e6c4f90155f8cb11c112f40b6ac6efe3cea73bf", 0xa3}, {&(0x7f0000001600)="6190eaa97f5816ff738c3ea14267ef465a1254fb0f28a8b86f9f76d2a03500d9faa660d6e43fe30c0b91b921ec641bf04be7b5727cd295f08b46c7b6822070cb3ce19c030dde2f7b80b2542fc6e7d2b53929510dede522d2b80d8852c543b638e05b2aed1bea638a7d785b8dfc45fc38abe3a27e1df0cdb0960ea856cb05c4d70e288fe80c5ff2744cb0292b4866a1b90dbd0dfba5e520e7be1890b4d1bb6f8008f542496d658ec2c8a1127f3d9ed59753de5285da65174570b17806d6915e54607d566c4cf3de9df90cf1eb5bb1889a32f226b2706a20d8a53634194e91ea39", 0xe0}, {&(0x7f0000001700)="d042969b92dc9570c30c44ec329c9e6c0e941711f8a7ecf2e74a002c71694d8dfafe9e853021186c6822186b472401653d97df616253811d051c1151fdd2461b3585997d5c3ea91bb3b68778b5b2ab78d7b354ef33c9025fb6ca0087e6c0f9dbc49f2a4db30948723230acdac276ab3c0c03e88bf90d73de21a92be5f13f0266b768a90d805cecca9d61d0629412b54e0ea76003ac0b6f4e7e", 0x99}, {&(0x7f00000017c0)="508c22e23756932f812e603f4035f1f4aeb4c6a9e63b30b32416c206ca33f37c1520e031ef8a0fded7c928e471aae7bafeeb5faef76cded191eeeca96ccc11630c04d1262df57c3d7f2206b4594b7f13957271ee6345a45f0787d766972e526e1f0f328ff5d83315b96a9b3fc00c511f178d4211ac9994b2578463ab65448607221df07f5a5f47cd0b0c10a5ccce58697ff962dc904009fe4787f0ade8fe2308307a4429bf1cc6c8d514ed722a608a0a1cad59955ee34dddbf2a6f2d6cdd1823d615d9ef5fd451a3a14fa75820cb065a15e6737215edf3dfe1fa2108845da6f05fbb230796e68c5cff8b6d99b18064111b", 0xf1}, {&(0x7f00000003c0)}, {&(0x7f00000018c0)="61c79151c5effb629c3e97d13b8eb81524f3e7440fb79c28706bbe0c41d80a97aad265c572b9a606f6b812657af1a845e9490fe2a097755af9f9da4fca590a83fc78f400a981356cc3702a7036ccbbd9e588c9341b6c64", 0x57}, {&(0x7f0000001940)="c8565f45b0b5c8ab136d0a30b9155caf1684d76c81997e4c5203527cd48790c376b80fd81cef9cf17e1835a128b4d074dd0d8e97963854f606fa411a4c05bee48224dcb971cfd2e03aace4517cc21dd3a5eac7d359df33fd8cfddde581fd9ed359d591cbad3650728d30e8adba24a744ae1cf55652f265a07ae96f9bbfe0f07822055672b445fdf4ec639c493c9a3f6acc33cb7f34006c148b790f03128d70a676113784bd89442dc6edbe520d8a9ece91b50eed726686dcfa45ed8f6f0aae1823b64d83e60690c879e31a0e111753f370f3a5cd3ab3ce36d41f18cfba2cd937a293d4db262db448d2d508ef1475960325dfcb8ecdc0c2eca6", 0xf9}, {&(0x7f0000001a40)="5d954cd3ce94d2bf82eb1ac981468b75408abae35eeb18e38227e80b5bdb959b6b70f94b4da4c5399e1667d5af00761a14829fbb83408bd8f0090c7aabd056e15e86995fb72edcf9ed458da532c798e92dc3b9d1cf478e29aee09ec44e1dbaceea05d50e9ce63b5d39c1bd25d75c9485b54b192cf0", 0x75}], 0x8, &(0x7f0000001b40)=[@assoc={0x18, 0x117, 0x4}, @iv={0x98, 0x117, 0x2, 0x84, "ed7a31f963c5aa3767ff8cfa53d26dd3462525777f442346f20ea544c1f870adee096998d34b2c2e5cc5407613d30100b0fa8c94afa68c7bad7da60af59c02acc537ea29d8ad636883d14ad4bab96f5dbddbe8c73cf9cc277346dbe16c1a33c26632e35a4e86d9184050a0c216b61939d73f8a7f28024ef8e3bc1440a5d2607589c6f6fa"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x7d, "f84b6458f8e81266660d4d3a013ebd688a9b2dddb32b4e1df85abb8cbf92dec0a007541177f0035f093f2a465c511ebee217b189dd98b55d905532fb8d09f2a0d1ff6394f25dcfe29f13c5a91f732dfbfcb35592c8b39926a7d3d963a849d8bb28eb87ff61852421bea7dfd2400a77daae11593ddbdda2a9515102b3f7"}, @iv={0xb0, 0x117, 0x2, 0x9b, "bde8c338bdef0e07f15d4070bcf593f595ecbad8040aa79c5bfe9415c4eee0f1a549ec6f0cdc0f839b1f860e8fc2cd74f1b983fe4fcde66a407239b2feef333bde49bcd06d7b9945cd03b55be872c5bd2a552e3dae540acc926c806d703bc8450964705da69daf8e1a050e19ad642c3c25ba2cc747e5009160860c8227eada2d63256d00279488b0232e7f7e66011cce6a88ba6f07100bc9b4e9f4"}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x240, 0x40804}, 0x880) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfff, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x202040, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x20, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r6 = dup2(r4, r5) ioctl(r3, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$sock_netrom_SIOCGSTAMPNS(r6, 0xc0045878, &(0x7f0000000400)) 03:38:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="97454c4e6546000000007d95690865aa466720f4cee965c8a1648dd3648400080033000000"], 0x2a) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") poll(&(0x7f0000000100)=[{r0}], 0x1, 0x6) [ 755.667109] binder: 18724:18725 ERROR: BC_REGISTER_LOOPER called without request 03:38:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 03:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xa}}}, 0xd8}, 0x1}, 0x0) 03:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="fd1ac426937313b4a8514300000000397ad753517eeab92b6fa95e1f2ae170fd84657589cfe3da2e9ffb91206e33d28a65d079c2576cbd1ecb67fd67881860123a5e132d18920e2c9f36358739c1aa233e18499b5db696ce677f88bd9e694087c2dfb4f036db9dae32a759b624afe66c37cbcbb826a2d22bbd2bd9ac7d773d5cb33b499d2401e533c4521828bbb151f0bca451412ab9241291c95907f856"], &(0x7f0000000080)=0x23c) 03:38:27 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000fffffffe) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) lseek(r0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x3) 03:38:27 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000ea8000)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 03:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x5000000}}}, 0xd8}, 0x1}, 0x0) 03:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2080, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) mmap(&(0x7f0000961000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r1, 0x0) ioprio_get$pid(0x3, r2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) r3 = socket$unix(0x1, 0x1000000002, 0x0) r4 = socket$unix(0x1, 0x10000000002, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000100)="aadc86d6b4ef396572819c0472157c4b65364f367ed37685d1327055e02c1ef3072b64ac52918b98cdd0c8e7a669e630282517032881a6bf8f36954a90d6f402cd2eba1b9c2fe78347baab5d8de3a340dc167a80dfc1bda1cb4f9ad985fa2214d543f13553b4c86b668bb577ce89b44bde1fe4712099634d804fe4114c58f3fe7ad4dcc05d00bcae2cdb4b851a333c99600318ffed5c153c0f4dbb7f532c90d62e50cc706a063420bfc53ebffaf0ec509a2cea25876a58740a657558b5dcf52e941afa2b45387d0f9978506ce78964e51511d3b3a2b07ff5e554398f33fae1efe3acdb0931d8f6396684bc31f9b82b1c4f1c3312", 0xf4) r5 = dup3(r4, r3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) [ 756.461012] binder: 18724:18783 BC_FREE_BUFFER u0000000020001000 no match [ 756.468128] binder: 18724:18783 got transaction to context manager from process owning it [ 756.476496] binder: 18724:18783 transaction failed 29201/-22, size 0-0 line 2843 03:38:28 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b27c, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:28 executing program 5: r0 = getpid() process_vm_writev(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/87, 0x57}, {&(0x7f0000001340)=""/190, 0xbe}, {&(0x7f0000001400)=""/59, 0x3b}, {&(0x7f0000001440)=""/3, 0x3}, {&(0x7f0000001480)=""/13, 0xd}], 0x7, &(0x7f0000003940)=[{&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/242, 0xf2}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/7, 0x7}, {&(0x7f00000026c0)=""/251, 0xfb}, {&(0x7f00000027c0)=""/46, 0x2e}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/148, 0x94}, {&(0x7f00000038c0)=""/103, 0x67}], 0x9, 0x0) io_setup(0xd1d1, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000180), 0x2fe}]) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r3, 0x7, &(0x7f0000000080)={&(0x7f0000000140)="ce348822fa9f7dff806526041ee58fcd35d103d4a36eafa1314e4e41fc65e3f3658076b50546c0201477ba83c104eee122f7da2658c993791ffe9156cc9f0e7e875b707b", 0x44}) bind$bt_l2cap(r2, &(0x7f0000003a00)={0x1f, 0xff, {0x42b, 0x3, 0x7, 0x7fffffff, 0xfffffffffffffffa, 0x3}, 0x8, 0x3ff}, 0xe) 03:38:28 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xd412, 0x20000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x341}, 0xb) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) 03:38:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f485ad5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0xffffff90}, [@ldst={0x7, 0x731, 0x0, 0x91}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x80000000000, [], r0}, 0x48) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000180)=0xe8) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0xe) 03:38:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xa00}}}, 0xd8}, 0x1}, 0x0) 03:38:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:28 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) getsockopt(r0, 0x81, 0x4, &(0x7f0000000140)=""/242, &(0x7f0000000080)=0xf2) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x8, 0x4) write(r0, &(0x7f00000000c0)="c4e1f64e08c456a36447bc9e5c17326a", 0x10) 03:38:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x5201, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 756.595541] binder: undelivered TRANSACTION_ERROR: 29201 03:38:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x600}}}, 0xd8}, 0x1}, 0x0) 03:38:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:28 executing program 3: r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x200000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) 03:38:28 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='setgroups\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r0}) sendfile(r0, r0, &(0x7f0000000000), 0x8000) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 756.693675] binder: 18803:18805 ERROR: BC_REGISTER_LOOPER called without request 03:38:28 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x44840) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x2202, &(0x7f0000000200)) 03:38:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x7, 0x4, 0xe8}, 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)={0x9, 0x14, [0x1f4, 0x8, 0x146000, 0x9, 0x0]}) mkdirat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) mkdirat(r1, &(0x7f00000001c0)='.//ile0\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000003c0)="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") renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f0000000280)='./file0/file0\x00') 03:38:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x3, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb}}}, 0xd8}, 0x1}, 0x0) [ 757.470232] binder: 18803:18843 BC_FREE_BUFFER u0000000020001000 no match [ 757.477286] binder: 18803:18843 got transaction to context manager from process owning it [ 757.485697] binder: 18803:18843 transaction failed 29201/-22, size 0-0 line 2843 03:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = memfd_create(&(0x7f0000006fd0)='/dev/urandom\x00', 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000005000)=0x1) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) r4 = syz_open_pts(r0, 0x2) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/92, &(0x7f0000000140)=0x5c) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xfffffdfd}) 03:38:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0xaf) socket$inet6(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0xfff, 0x0, 0x20}) sendfile(r0, r1, &(0x7f0000000300)=0x48000000, 0x8001) 03:38:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20002}) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x2) 03:38:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x800000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:29 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x7, 0x400, 0x0, 0x101, 0x4, 0x90f1}}, 0x8) geteuid() mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, r0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x200000) [ 757.605269] binder: undelivered TRANSACTION_ERROR: 29201 03:38:29 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000013c0)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001400)={@dev={0xfe, 0x80, [], 0xf}, r1}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r2, 0x1260, &(0x7f00000000c0)) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:38:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xc00}}}, 0xd8}, 0x1}, 0x0) 03:38:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x6, 0xbb87) getpeername$llc(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) 03:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:29 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000001080)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000010c0)={@dev, @loopback, 0x0}, &(0x7f0000001100)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001200)={'rose0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001340)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'ifb0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000014c0)={0x0, @broadcast, @multicast2}, &(0x7f0000001500)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001880)={@local, 0x0}, &(0x7f00000018c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001b80)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000001b40)={&(0x7f0000001900)={0x220, r2, 0x1, 0x70bd29, 0x25dfdbfb, {0x1}, [{{0x8, 0x1, r3}, {0xf0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x10c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0xff, 0x944, 0x1307, 0x9}, {0x40b0, 0x5, 0x2, 0x4}]}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x50}, 0x8c4) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) readv(r0, &(0x7f0000119ff0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) 03:38:29 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 757.714939] binder: 18861:18862 ERROR: BC_REGISTER_LOOPER called without request 03:38:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000010]}) 03:38:29 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) semop(0x0, &(0x7f0000000100)=[{}], 0x1) mprotect(&(0x7f00006e4000/0x4000)=nil, 0x4000, 0x0) 03:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1400}}}, 0xd8}, 0x1}, 0x0) [ 758.482731] binder: 18861:18909 BC_FREE_BUFFER u0000000020001000 no match [ 758.489777] binder: 18861:18909 got transaction to context manager from process owning it [ 758.498146] binder: 18861:18909 transaction failed 29201/-22, size 0-0 line 2843 [ 758.619736] binder: undelivered TRANSACTION_ERROR: 29201 03:38:30 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip_tables_targets\x00') getdents64(r1, &(0x7f0000000380)=""/4096, 0x6db) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x66, "4e29d5c372256baa6160a6126170cd706f3afce7bb0bb4d687b517b04d2d33a79ffd067641b899f94666d5914fa29aabd7da43571d60cc9271af41e68602088525beab4d8f1789b1df1f134a70cfce5027c3dbb929729a94ec0363e65efe14e97eded1c4143a"}, &(0x7f0000000000)=0x6e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x78a1, 0x85}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x7f, 0x3ff, 0x1, 0x101, 0xf73f, 0x5, 0x400, {r3, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x9, 0x3, 0xffffffff, 0x9, 0x9}}, &(0x7f0000000300)=0xb0) 03:38:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, &(0x7f0000000100), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB="646b5a8132fe896c9f70792c7569643d33323636352c666d61736b3d3137322c646d61736b3d32303230342c636865636b3d72656c617865642c636865636b3d7374726963742c00"]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) socket(0xf, 0x6, 0x9) 03:38:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x7fffffff) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x5, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 03:38:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:30 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x10, 0x0, 0x5) getpgid(r0) sendmmsg(r1, &(0x7f000000af40)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="67cc8d21ec35dce81e3db7e08285daf90623a47afdb6694676be66c946fc37007b20c4300fd89baeafef43b505af3c72e2c329241a8ffd3f97273289bfd28868a6432a2ae4662c456c58161a9431d9ecafeff245174586ed3062a627858d4cd89853ddf963baefac2090efaf993907b18529133642b1aa743f7212723650813725c546208327b7d9e8756612e0be", 0x8e}, {&(0x7f0000000200)="a25cac5e6f635693332ee110202f35a1e68183123d7ac122342eb9fed5aecd4c42c3183158d9f44a2541caa199c557ad9c7c36a9f10a50a50bced7d89a144d5c1dcd3d33bbe4b6cd6413167b71ff6b4ffbcfaefd295e14349147a70e036e297f6e74bdf9f935c1e42b10b5b00c31a1b3b5abd752d8504eea2399abb74128222916c7234cecab8460baa1e449b5d664f8ec162be3050fe3b7d37739fda270ef27d770835a86916ad204d69175506fe08cd31bc4527cb099b3ea51e42474488c003eadc352adb527d6fb41e0c3cff1906ec4d8", 0xd2}, {&(0x7f0000000300)="a9502010f66d0537278fe51e1af0e052382f88318a06a80e8ca7a7d205611bd149f82d39b6c2ddf0d6e11901ea1e390bd65061b5048fe48b5c2fd7cd43d8780b042fdeec5e4be37dfd380d017db595bb2441037171da300a0b64c85b82926e4253b7fba8d1c658ea70edba90d47019538ac5635a1055073dee3115d73bac7129c2b2bb4bafb703ea2cf0c23728deacdfeb1267c07b434bde1a69fb1bf4778f890f00ab21e1b21df2351daff69b077ed47733f7557d7f000cfb0f9c5dc8137f2fe8ac9868fe8650d0150839dd8f30931aabf5062516322a", 0xd7}], 0x3, &(0x7f0000000400)=[{0xf0, 0x116, 0x100000000, "b636066581e2127962f184be340062f285c91d0c1565d7f3cccbcfb0888a9e4613b2216349aaeb96916952408d139797cf5d374b335f90613fdf21f02ad4de3720cdbbaebdc91a8a962f8536614737c560e84b9dc35e49bf4514491d720396cd0e1ba979bd361b86bd351e8f518a1c0f4e0573690b4911a6555baef87513ed2402618aca4412154e8596c8b1f3fe2c3b1be4388e3bf125e0561b909d7a419e4ccf7667e8fb1803b733e80ae18d1945ef7a91c8241a6191a8b9abf0ea5aad359cef3441218ce7b63ddf0ca9e763044ad063ab54b6b88dcb4b72d1b06fdfc8"}], 0xf0, 0x40000}, 0x34}, {{&(0x7f0000000500)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x1000, 0x80, "ef6be713962296c82439445c0f82eb858c31805e34378fedbbf018bc5b0dea58e8f8fcd73aada2d8adbc4c575071ca6a0e085bd9bb238768d1c23aa88294a7", 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="a55a8102e6fafa2116440cc0e54f5e876d0867f6d29ad9910eeede786b4da4e05e000dc7e0719b137c533c9bf9f0682c9635ade628fd45782baa6f1772ebe51bafa16812a92037e2fef8d40f7054f210fe8f2767eedbf7a3dbb402c317d3e54790abf30f106b05a43a5d0ec55c27620e5d4e66152c5d1ea6771f3f4d86554338d04e4efc9e5fad1c96bb96c5a4721ea0bc8c253a354322e8582b9246cc351fa7669c2f09edcfea2ab37fff2eb193b780135a1d1acee180a4dab89c5b98c08a6f75cbb3f1edface84e10c5e1c31461832cfa30ebb8f07d868058c3e7b6dd09557013b200069f375e9de38c911e073", 0xee}], 0x1, &(0x7f00000006c0)=[{0x70, 0x107, 0x200, "a0d54bebf34fc4dc246685735d191417c4ef2f17b8df2919b60348ed80ea33502225bd432b533db8f08070e0ed433052272357e33549b0419adb78096a71b39f70fa8a51a70bb826d8bb06356646e7592de08c767b4a35d7c95ae0e697ca4a"}, {0x1010, 0xff, 0xffff, "05be852ebffa3359a37caf3b459a2d7a53aaaec71a0f6dcdb76a0c46dc291a82210702e9835f9ca3c9cf99ff42fbcb9ac800cf4ad1b6c95374bb4d2a9f7bd38ff25fbf138e5ed0ed538f717dbd2233bf64bb7ca41990433b712b044477c7047e6fd91bda29434efe6a7c1eb217f538cb323036c216a9fc928b038012ee84680afcbe5d275ec4d98ac05e487634a0e3f0f1fde0fa9a9238a9387037fc51b775ed039fdf68240f5148271d31b22bd109b362c90027aee785f73cf223862838eece7ab26b918559b5aafe1b6bf914fd6bc9c8e53f088cd5c62f90f29508920ca5e21773cc8d5a9381f2236a4560a86c62e943188af376cb367a1bd6cc37bdc45501fcdcd70a7be7cc4281408c3f80334315b7f49dfe990c9e13b8a489761bb73541f7a7e649c00a779a64ed17f36fda6e92adcb77195c6f45b7526a37aca96332ad98c1d5debb25a9d95104e2b4197b72776ba661832b6144177eff83818e2827d8f9c2ca410141f35299bf921a71d5e5aaf58f1868607f8687ceb8cb1b5176a25462edc6fb6689c79c4e1828ba4831a751632751a3f494e381f15d8e5164048b0da471fd0eac2d49b9bc928d51cb32371ac8bb3c3a00e49ac0bef2d1229f259f8e956e271d58f5ffb7c7df00df16301057d306f0e6ff55ef0dac393b6b63087254a701af51e80061f838d1c98d55e8a2878051d26d62a67e7542e8476ac72de0bf03572f4fe2a5e3ef5a45ef823b05b2d5ec2f2df930382af895bff87cbff0143159e746c521f0f0d45d68e5245193c0a0b2aa4656444a5c1fa51c13f0ae7510d5d99424a4fae8e5c002874101068949ca78e2576d4c7539e1fe99b17c1e9d237836f0d5217d5ebae7942d3ac81bbca37b82a88ae4516f0eabbca5066f448b5706b2f8799cc8fc22505767b80d161d116a54313897b130dc3c589b43c8361bc099b1233bdf01c482371163db4b7397c3f0c92015179fef69bbe5c1d70418cfb1a7f3e395667e4fe2043ddda5e817d7f0d1becb313dc754878bbb47f2ee637e3a0c16302e4fabd9e0af6bf4b0700c46f8645287fb49e320a9996870cd1a45cbd5a5275fb9f67cb4eea593739a723bd0e14289047ede36689d20e17dcb18bb2ad42c8857c1b253e5e3291300b80d7a2bbadc1699efd29be72080c6f3717731f776d7137f37a1e9c63c7f8aeb7cbc5c105e53ed63879b7031630097cebffec65b8b45a64fedd35519b7bb218ad831b062b3da6cd3ef6e2d1c71738b1ea4567f51fe9a2268f14aefc8097298d498754ab21e04d22a11d50b0eb475ba8e13617149caa92c2a10f3bd5b092e403a505c43a9932c4012a6674145dc003694e46a749b6fbdb2946216589241027a77dc48dafe7aa7370c4cf6e505d7b1bd08f8f75eb92c52bf84c698c68ef1d5a4e3023a200acf9d3467d422e38e5ad20df945147597549cd54f96a8762dd9662cf6c2994d7de59d61639abada1775ad9864953a98db5e76b1b021d6d3361f64ffe25ce148cb81a733793ec10842f28f634f6c1b15ed7f61dec5ebd7d2fce059519081c660d37ef728e6ec9a47683c7f67d15543e93dd061aa1db36a415420bd468651fa0478317775d4491e0c80114c7a1a079822c4940dc2b299105f1df0cfdc7143f6ea3ff1b14569bf36954ce8ae8facc447ea5a88f798f7cf0cbef1ceb7fdfb901aebba13428c84985d68f63c08c8f2b66ffa6721c91d153324c5fc2c702e705d00271716f1653c79b385673efea880e720d431052d9fb0a815f308552e1976160f146f248084f71b78c8a3cb4971e7ac3956e1a480c07047d5e765c66b36e945b9ac38871ebcea673698dfe8be2704fadb68fe24d981f7c91809bd1bb28a3e4dad1288ad1d41e2eee82b5bc2dbacf2d1c06083d898d861c8e99ae9f25e8413c078620d51d2e9da0fcef87b9548c91fabc6913679a557e2dc694f360ecff202449114ca7f596529fbe9d2de74013a119f0c25d8a5b9cf36869c03f0aa254d332882c4dca1aba6b28534f8809eb7c24de874ed611705307d0aa9fcd2cb739a0c68215749ad755b2093403d21f16686bdfa56757600b9927a57ee7720b25e93a12366d2ad428e9d0c846140376fb78ed2c7dc5125b2395a5787687c8edad7d241f631d3f235d857b185b423a77d0fbc2cd88758de1951ab95ebd8d3d2d10b84c144efe2ea0de49367d7881bc366fc001a53b9541bf63ab21e01c0c9dae26336044dd5d9e3a65be5ceedaf1ee06ed9ba8335ac673edb6da1077bb5771c3166bfae2df1cb30210dffac84ab78f5bb0058ca28350fb7a92622808285fcd2e2c23e8cb8f94377d4db09f19cb780c4e3a733883cdc6d7340310a8700cf20f24274e397f3e8d8a680d8330df88fdff6800d75b94f3d6f443e7f7191895730d8d9f048431449486c5840eb1c18521138513344f050525e28aa58920f8ad4945dde37ecd7b8ffcfa7ee758ddb98646e896d2c799a3a462b66bb0440371de47f31064b28d1c8b11c43d6f7a2198e1db4643d69839788e18b5beaced027bd44a5f25f7b0b4d47c3416b21a6d544f353cf10da99fd3a303e5704b42af9c78c9d844833946d5d1a7ad16b0d5c762bd2862707d88ae41e242106df10450c8ee3e0b7730e8850d0934a1b8cbf6065bd7f43584266a24e6be783d26fb1e27e47826b113e61f1e99d83d46e97d5661189b71b65e4900ac6396721f7675055d2d30aa5749c766ee581364e651b908213f86f2b2ae2cdee66b458546bb13f583afbf79278d15504213532b24ac1162759806082d3c621a310f309a67fc212b022c8856789200844368981641cde8210828ef85db2095e19498ce3ddd77461beac14779c5419aeba60a11dfe23cc1161b6c56b15641ee9c8981145b61334490675adc38aef80d7d775ecb8e02a39d046ef6367fa659758e53905a4bc3a4125b4202d326b74816f6d3a21a103eb999252377e29ccd4f400c267353a6c9f83a468b3fe944e1501deabccda4ff8143cb768f6924307883582cbb52858eb2935dd6af650965315294eea64925bca6de053444a56d09d2f783b610c3c57d8f064d18885124980f54748c70e130e41049ec33624c0822886e37531f11b2d9d8c408832898fade6485b488c9d93a623848dbe3f05bea66f8834d2aece4a6b4269f4e838a8db055d54b5885f2fc8ec4c1d539d1ba1be7f052b6cc73ccc7365efd85d0f8c97825e1850f57d42b13d75bc84584d94cca4a35693d5262474afdf8d42614b82f3401d9cee3d0e310cad5b8d236b7435238d00d4c341b41cc7c53e1709d49263557a37fc5744cf45bcf104736329b6b38fb892a1f4e1aee9087467cc69a69ed3895462a8feda3f299330e656af767b4781421b49b3526b624355bbdb53ff0b8890b3d6e8f9e7b18d18fceb99574adcb3afeaa46563efc34b2595d0b2ce220b4d0cd6f355e6620da9bf27b72843fec048b457997187ced22ce53335152015e3cfc508a03a9b946bc6028465492a4ba1edef09d20529affe96f884177893356f3d86872ab8aee926bb4c521ed9d93f5afac15ff66b41e4bf4f9997eae4b46da970eeac64f4a2a2dbadbd02c1ca0a69df238406ae89fb1ee4e4f70991e06dc3b1878fc3371c28e8d9485aa661294e5889a40254c2f1630fe11f241553da50351b97fda9f589f5cc85eba5492a5bf58be514f24ed7e905b65e19d1a0cfdce8c4e763c70755e6baa39c0e8b25738a997a085599f56ac6c6e7a3d83bd9e7fa8bf97df0f445cd0bca8b2ae14ffb36e5142445faebf7ae3b8051ccea93bdb826db7dfefce1e15518e7d35dfe6dc798bc4b617442cb35a3c749e72574def99357ace866744748a6ae72667a9f06352b4952d87eda61080f296f1e6021ee5a708e7e08b6983e855ce82f77996329534f8559e67ab99356255930e94b32f7a32a0f3eaac7df0d0be0ecb38aacce63a8d8ee8278a4cd3071d5ead818d3ccc8eaa04e0b929b69b232edf7e443aa81789d2d166e2b02b6463632bf50fa96a892c5e9cb1d3790318008b116a7ec6e11e71162702eed51bd567daf20f6bd08525e0a3903b904187c97506727de83f80f56475c53343658b3076b5ee8bce1c710bd6ab2b5ece4fcfc95b7915804d518af8596670a65ff2ea07ef519904d7ea7f2a68e133fbaa6879b7422f305804f9789db97311c4f92308eb5738349f995bc6573d5940163e935fd972ddda1a28810b9a5c45043cd2730e8b762925901dec9bdf4c2107e495d610e8d38f0081120ac791ddaf4c8d95abb6582e2ebc0d8f2c2bff8f9051ea76434868f86ac0bbc3d920b5aafcc6e0dfff37c37a67c67bb85b6910198bdf903664769d5d1ab717f44ded6512d33cb9aac808b72843816a6e3daa2069016c04cdd68893e70eee1a976b6e2fab19fc20a783152917773f3fb663b08a8d1f617ded85d3f6abb7151c3d16ac5551fd5436c98279d8345d96245c267ef19e828c917e6bde8763e8787d0952921b71f94010e7589ff5158a8f467e5f43dc5d871b73f81972b49737e0f5cd3694d3cd1ea08cba0bb7ae94c0cf9bbde686929aa7419e137f5f8950a5a3eec95a4478ae65f2d7c6c3ecef201f4a48845614c938cbedb3c4a18252d846e5ce52cbf18b92aa825a28e574c053b73715ade0a4036d600cf46d8579d47d7fbd29435f02f8691b6507f1ba700bc324df5f2e1b27004ed06785773743ac5de55efce3524bcc62ce20fd28140a971e5fa1b8fe065cc30c2bcb2d35044be10cf6d678d404604f555156fa7c697fce063c91fcaf5a9ae8624c0dd6dd2583e5d7163267da7349eb080c0788f82a58eb13fa54a69979e32b0f66ee0d50801dacf713cbea6f044df8d46ff96f51a9d031ea9fed881673dbce6a0eab2399fa70908036f4fe0d6f6dc4f2849a0a5903feda8f89475cc6525c75875d4a30de31d52ca5174eb7cb4edbfb086fea9503aeafc64f3f2161fb4a662b23d9c4c117968d4858459f879a1f5e6e2fa9624db6bea961a4714bbdb8c1f66a6cc6963cc2a2acc6ff941f4c0f267e6d767f3506176670c10ca20f468509a63041a93193ab4193e2d9ad4ef7e039a57355531d3a0875b2b9d573757cd97f3197fd7aa2b6d3390cde162ee0c3c3c5982a6258b960d8fb6c6a0fc90455a50ff3efefb73bdd4db4d26828c6f855c5d00045d5293cedc614e90e5dad91fac333935366e7ac4ded7ec7b5f5db0258f476df060e3c1088c5693745f0787e3a181934a6fa4074b745ea3db730c8ba74f374a376d8563f42a6af139807bf66ab61cde9eae4540277803d0aaa81a4a5746362a7ae72db8403b3580a098a3b3baade3a407a8d850158f0d22613beb7bc3ab49d55d81463faac19a79ba2d2d79c1dd6edfbbbf54b2d6a67396340a9956718e45da5b3790d5340387a413187bf2fcd2295b91914c81d487576ffc176a090d8a0d98254a64480f8579830b40223e5d35df4f2de4f4316e1eb8ac88af0bb31c838cafac4327fc4db9c57f950955d349ea477c9059a7f4d16e642cfe9d9bce247b4a8086d0b44bf3d87bdb0959d08262670fce04f163cbea41509b136e3bc9a754d1f00062187e4c461f805d615a784006f4139eb31d969459d114a444cc6e1523e78589a08513ae120b5a843e3d2b559cf9e5d15c2d63d1c783a94faae4a27412eaba8f1f6ebdcfaa1e9182e94e65b3efe569da71550d8e483d0f4f11d4625aaaf2c3314da76e452f2c11410b39c4fc2be905bcfe6cf8784969a481bd9c7d5a97d44a2ee408f45867e6613f2d9f0e22d6b40d32d00b33e31820da6f"}, {0x108, 0x73ea0f6f1202c288, 0x9, "d10f7253d3f0098129c1316f4b63e6b15989ee4e098f991ab8fe2bc632287b190cd9084fc6cfc4c78fa9a2f25679ad8bc878e491ee8f4a49943b522d54f74cf85648d5713cc9be90377516ae85a163ce86a8f2b909a32dbf00650267045a23366b719d7c386aa592963f47ea70d70d44eb7fd6ec62c04f66b57d5f77bac33eb3a3231097b4a0d412c865232683841442e8895f32dc11adc388b39cfd4323effb3f3215138e2984034fa74c20f1fd99339ca7969af0df9a74f4fa5cd5cabe325e9ae4dcb26e5799b803db3e3c33d555f2e2a4d208854d96e0133475217342626123e33ba225fdb30733767673f87324306c5b379009"}, {0x28, 0x102, 0xfffffffffffff3fa, "98c172131846145255c790e467a485df32d48ebf6bcd2d72"}, {0x90, 0x116, 0x5, "37085bf826dee78686db51c07f703d5a5f263656d484fe29e64ee28e501df7a96981471bbd96e3bea1782080adb7d288a7d2cb1b440e3cf9eae97353002cfdf92be28bf5e0b42f4bf88b9154241e262b441ec21623eff42e98d35bfeb0ff6cf6b7949851fcfaefd062b80f22084f0e35506ff98d13e5aaf737d007"}, {0x100, 0x105, 0x10001, "a6efda3d90ce2881c9f32c5820984c820a7be679bb28f4fb4b58db7ae90efb88e754c6b86bf880f63bc6aedceb60c7ddb9e90305eefe5746c279ec7d0c1a467ea1a53328a68c8b4d099f28191e3105936731f4da8aedba7a58bf2be53ac3dca04a6d1894ad28e8d3477572f1061687153752add3b2f073e0c88368f81678538e5e8a1bdbdc99836617b463f2cc700ccb8e7b33b8a7e0af6bf96d490c0be1b6cf351a31fbaf2a8c5c35d0f1f9dca5a2fb4e964a30f3018bc39228fb8c4db4599fe09b43fc424e358d93469a8921a7e758c612986b5d74e5f6ef0cad6cb916456ddc239cd3e241edfb410128d3a3294e"}, {0xe8, 0x10f, 0x3, "f4e1a66fa4c26b4b5a0556b00d1d6e0cb96c94752cff86fb12dd5b4cdb0c0693275c8a6ba00b0924904e676550a88ab44ab10d58da60c9bec79af8eac803ad20cb4d8f14ff12e34cf1fcd18c6420db68f48601a01a095d6a6e9de5663db91bb5d10defd0663e22022d9ace9b7125de9a14cdb32642108d9ad2a907fc705f963f6cff794d2f434a5c6a2a3551a6ba75c077a8979d6e38eb96f0bfadfe167ebe801a1ee7d968406980f0bfe88ff037ea09e2f0c2a30e3ad51658818a4a93719ca0757be4444ea4368662f31c2962c7904a2e60556e23dca5"}], 0x1428, 0x4001}, 0x2d33}, {{&(0x7f0000001b00)=@rc={0x1f, {0x7fff, 0xcada, 0x1, 0x100, 0x80000001, 0x80000001}, 0xdf}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)="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", 0xfc}], 0x1, &(0x7f0000001cc0)=[{0xe0, 0x18d, 0x0, "be9a8d955ca44c499fd77f9bf078ca9ca51199aae189ce831c11b411921e0f90f34ff827585f562bc3a00217c494bf2e5953b8e04371b6a633a1b24e86862eb47ac6ad2cdf35337f6565f6642073a9255261da66f59079de98a9b70ce1b595b6833bf962413269061b72d7517ce57965324e196bdb004823fdfefc600ee7832976a311211f9530db779243110018fa94432b66f5bf3b0340ad1520242a2189250da6579dd50f129e442d71006b80800a985a45c6117c33180df385aeca8c6d869809bbb1e28e359c2ea53224980f"}, {0x1010, 0x11f, 0x46bd166f, "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"}], 0x10f0, 0x4000080}, 0x170}, {{&(0x7f0000002dc0)=@ethernet={0x1}, 0x80, &(0x7f0000004140)=[{&(0x7f0000002e40)="3a4bd54b8d23cba3d19f5e45278a3fbbc465422e6c5d616c5315115295ae77c94a829b64a0ff47b0c4b4b337d0f0883fc2f37f786d5f06d843d14a8d251ce48be4b320ebb3a22888e4fddc5cd6c1cfc8f690a4e2a5e4eaa21eff985d48dbf03bb5024305496305ff01ddc8ba145c6bbb934e5e701b073370", 0x78}, {&(0x7f0000002ec0)="aa0a8a8ffad3ae906a8f4f5d96eefd905dae839096d43f7576a1e1ec3e5d651c62a15369faaf2e851e267134c5312485cd846236c54653ea0f", 0x39}, {&(0x7f0000002f00)="49d1ad09ddc5d6552753f22abddafe8f239fe0f887444e3535c4e6b95c19a561a8bbc0e09d68f75351859bbbd00ce95175719725bae5910249e9c7b8ea567fe3d204287da28bcdce960e2774a6241b0120e5b811867dfdf66a5b2a3cf5eb1fa1b826123406da04561fb534b68004c5deb32452f4946e230759cc4a701a8e11ed94c515438d0ebdd991f062db128c44a2659dd375e45e8cb08e8299a4f12593bd08308df5530a36206b8cd2e16461e91ce59e1671b9937f14b19c910e334d9b6db7cf22c1afbbe83ed889fb9845f434b6fefd949236977d9ed49d6c9f3af71a574f4bc090c125eb84ffefa4c5cc8f7c070b95ea7f3d2ec145a5", 0xf9}, {&(0x7f0000003000)="1fc1aa5f16c56dcf2344c35ec494d24341b5e837186a783bb1148c15126549b8e2e6c398147c5ad0286afba5657092dd9172d132e4627bef5eadea7bde68409b6ba55183b381d1d07fcaa7b190f2e3c64df2f9117669528ac4903efc0984a88ed748321056e7b7eaa8628c88d3d8c31f83767a960efb42477d115919cad3bdfab3ea072b692f3039bcf41675934f86b4e6fa3747aa8b9fafb9120b3230a7a0afda9a1003547dc6d3fd604ca9f7d807bce57a3cb2b689ac022c549931c05f2751372392ce477e52f12b820c282d8c7ae714a997ed9ab46793d774e68cd9c7174cef18be6193bcd64065ddc4bc99835f811fbf26aabd7fd830be6d1efcac54c8e63469ae3561f2aeb3ea179a769c36e194b963c7f4c31cc46facecfed8ba304f6592a025043f4bdb91755c1f17a40c38f8484d7512f5aa6b576185187f36fb45d2520813b21f23bfe00bc04e3de4d9186e218acbc2b879b2f5554d4f0ae7553836b05d46f35a48175b67896693235c77d34bb147c234f6c8b071edb0c1be97bf7d7b9c1bdc3fcabb23e5e609ac6a4f6e79cbc0d358a0dac756f4a28618be7c173f9f3c791a19afb41c5244dfd9c83ece1456feb512243a36d8597a5d4313530243b2d099dd6bdc9be0080758f0507694ddd13ce971816cd147869aa51381f9d6eb01a3bb85815fcaaa20e532bf1ec92af25e7b5d61c731904c25c46a744a1c1d04724453e3b2ed0ccd83c8a43e673927a94a9653cb1aff091f6d7d96af2739c8efc807fe34ab923f861e68d53cb0442be8ab86d5db023ce06dc70cd9bdeb4178d8333f67cc62416bfc1987719c7f269f0a9ee2851bbeb40d3f1e3a8294e2c4903830cceae2872548d63a19ab139fb9997aec99955e5ed283c86ff49e78f96d1459b90e4a5b3e8fc7f11a6d921532517451ef4dcf003fbaba1ad0cf61e815abebda1e1c4387da71ab46219c54160aa2436531994ef0846b3979ad9041e95e71cca65c880f0cfadc24de3ae503301bd77286ba2c66a8d9ad2418f1612022c30e7047c8d86753a1b2a58e3b9c0f396308aebce538ea6511210f84bd2b176267be79048d6f7fb1de8e048dac716d614d52d8027eaff7096c5fef39221dfa649e8e8a5ecddd649b4a6df035a179a5c43ba120dc9960f498e9132617fb05f5ae04c8911a0169e86898d87d464b8bc973414ac3979859ea244c3b712a6937831ef1470cd4744d17e70e6c68f756b9b01ecbc3594a9bf8c0adff4c94f5c239f16544ee1f2b1b119dd4aa3963f8248e0b438432665da72f214006aae7287632edc9107723c75a03ffef23ff9bc6da1f0c46c12d1a0c65eadefc008c67009370a63b6b43d9f3c2778da8389bc7a10213246446d5441857a44a4302c28c96cbeaa7c1c7db54ee23d609a57394d109fffa0e8b7232873c089b31082e68089930c1b5ceb57b474df95f520415c63d61c99d05e0a136d2cf024282a3ec14665d0709b481b44f968ad2178d62e6083ff8407a0d4bdb326c5c9bb64fe5071bb477cf478d26be118c218054e575f8b4be47fd2dc513772ebbef965ecbaf9a2924a20ab500138f5e4f35dceb3c9d125809f5f30d76eb5718f0566ac71931e7178bd574ed68d85893b32151992c6b403ed3b35e9876a2aa6fd7cab2f0eda0118ba72b05fe4cf685fd0a999d0efc848171a600b0e8cf6cefb081c2a9df1ebea3303eb9005cb4ef0a51664bd84fcd66214962a11a3e8445f504bec58d58d6eb7bbc643795a18c1ed25b2ffe27a1ff89d3c9b3a6035d00da123c2c433bf3d648602dafa1d960e323375d0ca6584c220b79d9af293584d8bf70f8e179e7484fd7704e3febf20a8763526edc2f57124e7c7f10f2a1430b39d05826d650b739c0660f0b20315a619dd1594b7a3435030af097aca9f013de80f12e6cce725a6abaf69607387c7315902cd2f132485f1610a93e9eb6d01477164d666861cde5d3f4a9fc01922b12ed72157ae277be34ce63649fd84c2d4f19b1a37979704d814631167f6655ceb853467a6a3b8ad9349a5986798ed1f2b7ce718e414895a2f2873348bff39c10383306c0b4fb84f510c0c72d2a0b289572b07b7fb3639c014399fcccb3b63f25da0ba4c8341530d9d72a2d8125dfb489c6a0e5115038b8d62d48e10634baf22ad8f0271152360486473be2f947fcf489c1e6a6a4515169729137482398e1da429adcc043034aeca4f174f0887238f042ff166fcd38968634d3a256503f0ba7bd8bebcc00acac14f926c1df33fbe115202c68ed0f03e18783d0660b3859a046dab2c8ad366c76bac8d1ad6fcfbdd469021a78f53262a4c0348ae1b9fcbea4fcbed9c9f8ca9dfcf334e57235dbb13bf9d2a520384d48e73f137483b46a7f534f1c75dc4070b5069bf0a167bc29ca3dad52fc7d67bea8262b2138ff4af3af9d31dba7b8e201ed907e718d2f2445a1c8e88f1eaf1f5ed8a452efbd29f2ae44b6e19c82db88d4136785ee9a70053c0a86699dbd50ae4f380ce0e3c9c5cb3e0ccd0ab98713976a0e5ad156e429cd6377dabaa213a75d16c1d3f8ad6665f9852a86b5f4e675d6b1f6b79d42c15e9d6a6dfb82f4811e21b648c10f79fcc7606b44d76f85e48b3441286795aed6d32c291af2b1aa1b8cc5df3dd8f050ecfc0a4061aa83ee810f8c256c1088e0cff272851108c97c5f8a881d2e4eefa2102084df1efcc05b0ca1dc47a03ed41847d95d390db14540c9139a51f1734caa6da5d845e6d26d533442f19199c21b74167f744c17294463faf5cd6fdc8478f55b5c5e523103b920678caa39afda6e8a3748a98991666e4653be0548694e5e634582d8204633f3fb7c91c49941506386be218d918691e430b6347f024d83b40634cc8784a3605422f004cb198bc2e5147e224b44cdddbfc288f9a1d8b3a3fdc4de18728c5613ebf3d61a68111146c9086e2d932391521b28a562f5891492b8e0dcbd2a5120ac205d0025e656cc799ae7a42948854bf8603526c99d857ae13dc2f7b8d960e30c1d8a9a429d1715415f378bcef6513c553444d427b3dd77d682191717160a66ec4b635820ce8b671bf2e11601a9f7180e3ebf717b6f14de2772a8bb9d2a9c45b46ed12c961446fd066d736c4dd9d426fbf299bc2252f4732146ecda22b7cdec5e04f62ba72b3ae5974c4aa2ca2c1b279a05d3995dbe0dde6f0ff96bf145682e8e25480f4c89a3445c8243d67a5d8a5c4006991bb5df0c808063d70a728b0de5d6ad590df7a43409e874566ef0f652c250b250a058c2733fb6e31d14c915fbe2feb9677a6afa8f6932158af3025d13553fa30aa2f57841b66335873261dcd7da73ef9d042e3608f099815351e1fa35d78a49deaeae751e62ac5c63ac6f68555255b2e748bd34acdf4c3822ecc41b513b9eaf3031f7585feb0eefc59d845421d8f14a1abaaad9a99514194377b5818305e9e0cc827ad7174d7794efa8766dedce8794224ba6bd977c73d5487ce7c6448ff75f8a5ef175511eee565970768d3b7eaae973a84847bf05fb0115df4ca8c9d6b6da6381b4c55a89d5395c6b27aa4b18e7f5127575a55f4bb38856d2c92a531974ceee5ba99e7a179107f0e9afc0435dc9943adc0d4679cf9cf47a577ebea3362939a84fdb6681b882ddd0b2cc4327557b711add4b91714dae411b66be52a76150440d2680b264ddc7955a0dcb23a446493a1f9b668eba9119eaf3a8c0f36269bea4a6d28331838ca5a0b61fd8669d952cad3ae279c800e147c0db85f8b3353212183ae1ea95e850dd10163a5e5172652691854a99096aa5b5175ef330a8e674f31aef7cb034ed3c4df4f601a206a2302647e1f268d0a390e75e3918f1fcb8e62ebdbaece82b3879ba36cc015648aa51ac81faccfb098a937d25e12867c8c991b2eebe9b5c26be968714192df5570eb6211932834f402d767bb6505d141fc35956a7678ee48a8486be5b43f4fc656f088745fa856fef9b818404743dc383e73f4f63505d2e02ba9a1588cf9d0f4cab013a2064507b164c1905cc809bdfe86bc25b4f0b779b5870e15da7ac0cac2680358799545aaf24f6c1600a6cd56a5680e44ce256d47b730e3bf5f1f56634cdd8381618b19e76b83a6b01fb0ea7162a28ee487c4d92a5ec07b6c565d5a49bf39633ec7a93a4dc79fe1a656703199871a6b10830337ac3dbbfceda3d49bfcf08825a64901f1eb2b82587bea145d7fbd8de2d7905f5906787324fed4b0aa980464e0e9816067720940b84b1dd23911ca8834801dcb3f2255af5998243c3667c88a0bbdbcda9697406bbd2b0cb8cceae795cf897ed9bad5a668da40b6a5fc6cb01ed4aed79f20e4c7c07f85c07d72abb41f4666812a3ecfac10e89d7de75eacafe029129c30c99a4ee07b59c2b671c45d92361db9ea21916d69f22536137a8462a0053b76dc4801dfaa42369b47a7536003ff40475f4fdf82a3b88c950f41b95aeb34a7887bf631bf442ab306f487424d7040271bf678c05f870bc49d1aedbeb3d7fa46062599824163ab5f7e0cc94f64255e678f9a014574057c5b0bf74cf3c3cb8f0ec28cc9a097e6cd8b9cee60ab2327141fe0a63a24f3645ca2874c11d3d996d0adab4e76f5867687a10c8d1035db6796126d3f8f00c08e4e894c81782e28f0daada86274dfb9000abb0e036f30e63fc93d5ca49599e624209c7a6cc2fd551a9823f78df047dfef77403448351c283e71c08a766da3a84f5c12e29082e726593a0e762df9ff685548cafb906dcb3938fb580e85f68bf63848ecab5585d73538f447b0e22f159434c1bd9a3bf4cc7098457fa1ffca80ba181627eaca877dba608c73afffb64ed93abc08c3d8eb79f7ded03adc9e4ee65d68f5833ff0c57c1d0d83f23d60fe2a351117589c96c8dc356ffdbf36bdaf5f194f7975da4ec78ba7778dc80cc5350384d02b7d01c94df25bd2104d242fd470d17b961c9ae341ad78b6a8859afa9d95a89a147c6371cd7486687b68628478c5c5f1e2de0e66d6cf6f3e965dcba78d4690b234a5098e1aff4894016db0d01ea28ba5edbe9faa005fb91bd6024f4e9fc12c3ea01aa0d7dc807b37e23873408468bb04de5bf0eed0498119180330e1f866f4608a79e52ba25d6f6ae947d9a5404faec1fd6cf721f8365534e6b822a51d46e7a35345a578407d6d04c263217bb7d58e6e85786386a8b4db45372d0ec2e48241299dd6a56d663b8cf0d70d9deecf525fc1d839e022858b6a10f16c6b96288dc6c8b2b839b1c5130e431b3dec5f026b8427464d7c072b2b8c4aab749b8ecf7f095b7604bd71a2378fa6b7d5275ca4b7a74d5cb08c4382a8dd807998b91a6183b50c3e9d1112259f2dc8edc47c03caed2cb46eb1874120715c70ae818e0c16ca39615150eac7a63af4cda625e7dcecf15c0d1d309c5671eecac792d3ea7a70a68949218a9cf0453376dd2bb6b87973832588e12766c2bbb6275bd59d86fa460aef42a5dae90114aba1173b8542bfe2b8f542f9d6fb6d59db4e3a0881ba4e75095fa98cfb706662ee761e72435cc84f037b183fdda27865a5880528b9f121b387b505bec9b0a8a2c0e35d15b1a37c768cc1ad3c807738449c84c70f5d2b87de37b7989cd3da5dedbeb455690fe262221eb60fb56e1dbf890a5bf28adc200b74969045e4d08970d39bb3c1ba4d74560f79871f7360cf44ff5c981c1a57d4dd9b8df26356209967cd7a87bdbb5636f800beecaa8f6e8de69e429ca1cb1b357a3df00e341cfb58502d65e15a3fd53f3d5b2009a2e73bafa2534da28285a2fb2cd071d1778a1ef9ea5", 0x1000}, {&(0x7f0000004000)="0db04c6f3befb52221f65cc6deeadcdea2f52c6b1561f1c1d49f544992437322ea2b448120fc00c0cc220b431bfd083da4774f72ccff6837b29e7f355166c927f5fa7b951c8f100af3d581ca570c62bfa4c20b191ec896b321b32e0a58ef8d0dd7a3dac0a758a7e8c8351bfa890e223e9fb5046a39bd37aed5c2721ac1985a3f76e1ee9027bd78d09a5058405d29432e3ab0d9ba50fa909c219555ad66e2ce60f1e65ac47d7d1030525be48672225aee0fafec91058d8509314f628ce35708c4d6f19a846a43ffb5fda9d46531ef3279b891a26fc6f85c787af62b", 0xdb}, {&(0x7f0000004100)="2f99c85b7e", 0x5}], 0x6, &(0x7f00000041c0)=[{0x38, 0x84, 0x7, "38bb9a08cdecb540eac547b8fb7a4bd41d9d2e46a67bcffafe487cf3e3816627c93264e3a73cde"}, {0x100, 0x10b, 0x4, "37dcb96d7f3ceda8c334bc08c0b7c95c9a593a2cd24324438c9f96d6e130b7bd7eac541707d6cc419c14290885a8459c6f5275a02238233d27f8a59d0c7f50cfaa44cf92602e93b057fbef4234299a35145102ca307b4a6408069b1326e3ab0cd3c933b158092f68654d8cdd733228ef5f4d3ee0fffc9278775272686a075fa68b10a5165ee6a53f4032421f1e707c33c03b4fb37d856de0b6f9608b3ef7ee109f318fbf6bc923596e5a9fddfa56d6112d205435cbc453024dbf793ecae779430cdb78d04890c891e8e4bd73d0d8078a95d559f00840fa2fede76081c150b09d60f4f8b5aca4311637"}, {0xc0, 0x10d, 0xa979, "b3dd6eb156ec18e2ff71ad3f980aac5e2143f5aedcf4a6d6cd61a7d51f33949088c317fdd7753dcb32f86ede2a2636faf58d3ac5499c2adcf259d57d7236889948b92ca2a97546ea284a5f26ed927412f349199bf9d25d3aab89e6c4becb43f5a219d08e977dbcdea8363b2e0eb29b4664c9d3be1e6afea914116dab00cad62fd19c002a5da8838eb98642385c94192288824648e9345f6b094bb4682277056dd5f453f54d28c86cc1"}, {0xb0, 0x113, 0x6, "c196a63980fd32ddd045c3d502e1901d30624f14186e6c6d9735235bec107a1d5ac9970b44a2873b1529a903e1c322840552c97e3ee959f5c73f4bccbe783f1d3abc6547c2d3f74e04a7a13eaabf9c41b586a27bebc6a28ebe108a708d0da868db1886bb1d071579293fe108d1a4bb99beecd96ef9d67095bd26cf96d611edab386016679c7587cc003bcae06621bf3d4636409470487a219f7bf9413186"}, {0x30, 0x0, 0x4, "8d2d0663cca8c83df82e256467bc951765f66601ac7406295f21904660"}], 0x2d8, 0x1}, 0x200}, {{&(0x7f00000044c0)=@vsock={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x80, &(0x7f0000007800)=[{&(0x7f0000004540)="297481cc0b7243faa486d2a345f2e02f2765717fd2401a2d2052c839030aafd8dd1596b5285d69c537871ee85ddcbec498436ed8a135cc23b1e879524654c6668f284ff33e672e1cfaa394780477bcab4e9632b6d46463ed85c4d1f6b2cfb22d5174104e4221f564a423c345b2fe24a8a944c4b8ac7471a0a878b454576204870d6f70c597181a3b1eafdd788d19e6f7c38ad5de72dbcc21a6a6ffffff2ae28d4a72cfaa99b988780c8fc4e1f88eacc986c567cac6c4f84e2cf9b1c704fd6a7f82ade0fcf69ea4f77d353eae2f3a3099118b9ec2eae464517603fc3bf39c81caccc6110f2ac90c33a60b190a3e8af7bf3a1599953cfcca415cf806832c0c4ea5c18d34a82debb521c1e95119b21ad72be79bab0966542c709c4efb198d6d3d405614f7e592c58a34c91a252674af93969d9ce1daabca763953ce05dac60613faf2a7f50a1e06fe9fe1d05278fb5a65341190f325220f032f47584b1707befdfee3aa2b4cd85ce6a9356ef93162bb1b679573ec16bc1816495af24c8bb273cc379b3781f17e341233364fb234528a40d5ccd14573a627364a9d6ec4f5e7f9867d2de7e6c1efedf826eb3db144a28665f8b7f375b06dbc3d8ecbd50d03ca52847308d292254205e1320a9241749afc4b6e2624eb8bbb92df597d1fb12a75d1c8eea99cfc2ccf934d3f6afcbe1a430816ab0aaecee2b4e562ca1f807912e1af20b4e509ac70a72aa702a1735fa2f9b3d94fe18c6d9bc9ed29fb57017ec2612d3c76a6e0dcdd904919d980c05e9829aafb6a46b9e09faecfbeb8592d81e1bb8c148afc9f4855e0d42997ca992edf31fde9760864daeb3305019e54d0a67bf652c48ea9925dfe98660aa8b51afb9109e8ed24645529fd8cf38906fcfda8fc3b1294f97d2c29157326dd4dd179daaa687038657a0a0f23264b58c41bb0a2f88919f0cffd1cc484dbd54430ed32e7c96ca3a5d4135f9dba2652da7eebbd34631355b4b76dc742b8d26321e2b28e1bbf02effa2db8cd8b3f99b3a68aabbfe699d69e8459de97e982a4d6cefe085b973e435bc88c787e7a6e079cb5f3e56afcbd442696601dd958689b3d5e6f59e46172a18d78a6794cd373349f78d3fc523a64a064325bfdc28863396ee4a63095b0adfc92c64d0245a3c7c1f59a90dd7dfc5235aa75c73158c90b69ba0265c37237c06bb34b4fa096348551ab16868fd01d5aeb80a3ab033d0d08d7e826c287a6e95996cd7dab2a559cc453c5d6a7f6b03389ff472844395b3bbcc31627522021231daccfa831955e06d5dfe960301bd753a0b07c6a2b0d70142e2925eb39956e299d53ee4d015ff141e693df048b893949ee876aa2887f3eab76160cfc0fede4ee961e2ebd492b59ddffd1e9ac7bd4ff1acd33ce2696653abe0a73ace6dcd95ef439231674512b230a8faada206c6dcc507e38cad9f5735e40695b00c3a03197ae9f44aa1e4d54938ac624d9cb294566e72cc4260081790c72167815d283653ec6d561ecd2597fe84d44f619c762c5e1c0257fc5806fe9fe72725a0e35048d9b973f5b4b557f76ff3a7ef1cc8422e63d85186f8c6730594d06dbaff9adb7faef73170ec4cf843770d8d7f500e47ec406684b86d244248b06322d0d6c9f576755495c34fab16ffe1afbe98b82cf817fa203dfa9c15aa5d1deb3e7a909802aca4ab6859d9af2738fe75c47332bc440093bea1fef177df694bcf0da4d9e87b9a585cb53d6758f06dea93c38699f13f80d95e129a9b2273a75556e5025ae367ef4aea9823e6c34a1a0745de556cc71028d7b567d5214e5726df0a8e664ef0b0e9e5495bd22dd9fed55111866bc357fae5e66fac2f4f9628c15974c5d2945bb7eb76126ea1bbf54b84f054b0bc91f9f7e424cd79d74e546b1f0696bf11ac518d0bd5c2003814851f8ee646d7a0f0f021a6f8959dc65f1ac7359cf68d5bb4f3cdd0747af27a6e833e17d2dc03b7b28cdaa0a3554147b4020cc46bfd41245d9a6151374b364dd4c1f466a2ecdf422a7fc7cd464a77e07aac2e3c7c72565a38ee793f3b7636f92f411fa3b05640592c0900ffbe8a5a2054046f5b09cf033305aee4ce6f39580ed6dc3a74c3081439f23467d6ad90fca9afeb9c9621965004f90f2341a31b28ef851e4bd987b2a4e3986df5155484f5afea8974111b4a2870b41050671b619aa6b9f164563afd73bc5687a9448e8421d28c4661e2b01872f73b8456c924cfd18f0b1428de5f2961d46d6c0907dd22f59b94255b9f30d10bfb8b0fb79dc3685fbb3e83671d5fbf816cc3b32859d0edb58cd5a3dc5572fcdc87ad2b034b11d289e86833f0007e4958caf87798144ef74734da66aacedef4339514eab33e8d10ab5004e9a9fb59404ca2b0d3b6bf7d39932295dbc0944dca1280357ac8a186ba302ca5c2938e30145163128b1cdd179d0d3fbfa256a4842e114fe40788aff6fffb366d4c57d658973e53415d8b2524f3e1c5231914fae7e5e8eb03f7aaed3b33643c44c6eb7e35e02f0821f1172d71d115c4f52f7b59c4b63d458b9b0aa9c0ccdedf5f01b27296dfcd6b3cf820f425bd609c1e996aa02538924da4c22201a133b1992b7ca44c7683af1cf87b053027476a6cb18ebb8e25442bccc7c55b53f26546dc6ede4f52d51f3668b2ab289f433b3d810995aa3617de15d05d74ad0da33cbfd366d4793d6709689fefa810e9aacdf1d97e90f54975342bfd26b0531e36ad99032a15fb9b238fb0d58f0cded7fc06e7f9a46ff8a0821861e9043def9c817d71a7a7b56ab6db156b13705721b13724708f476d083074bd701666d06b91580a076bc2edba297097d5d3ccbea82bf53837af486a10c3d399bb9beda2aec2606b41b687277fc7d7c728036acbb4e127a323ded862f357f09c3a67f6ab3052a3b8da450604d33bb0051f594e8c9ac9241aed22d3be6ccc319a12d30a21c6902d8dbc3778591e2db8396294720ca8cfa29ded6174b812c5d2c698a81c1bbcb84b5026ff8b0d684340da37c42abceaafd8e8153165d2ef5aad0d9ffa89131243f0edd1f7726dfbd5339b9a6c6806c93b81c50f3c19c8b73945e9f0a424466135b98c5d0ceda76f5462e71889693fb830312c492d2875b52c7c2f7b3bd546aa92405bc2267d1b7d4860137525ac2c97b07a470a575b840aedb3a7ad184e83a24393c10ce8c3377d7689cd88788dfef4aa889f4ee1d26dbc892da42ceace7fed354ca0883c98e2657a04104c7c6fa4621c0c039dd79257bbcd81fa475d8e236d4bab57cfd9a17be1337c51ff5cf3138847ffa0e889e76ca96759d1550360c72c81c91f515a7f3b94b5537fed54208546eb841f42ef408d43f6039114668c2ce9d40306ca2228603648b601deba9933493e8961151c2ef6573d097e1fb36f3556bb7ca7b764431845863a7a68ccf2ba0737f16189f080ed0e111dc5d93f3e9a186a6f435e2ab8ce152dbcf4f6e91f3976887d13e90e9ba93594a89ea3d05eb483aaa577f8a7fb77d89a4bb2983dd70dd5fddd7ddccbcc2751951675f3c2aa492a3aed2a1a712bc4c161e71c479cb05f7d5d01859a8b79c880e2baa5caaf28e10d2b48119268f7de08d018de79bbf79d57e93c349a3cac8192f782660940ba4f30f3997dbb359cfd1e86e2fd1dc7b4bfe4a4602bd70736a9bc65e0ec68563d5ea4d052071cbb77919629ff3fb511b218f321ba00ce99c48fff785f0f0bdb06cf47b746d5c5da06c0552bbd3ba48f32411e017726d5a2952bb826d4e079c565d995ece763a62b20f222074218d75e3ffa0e8ac659ca9b22afe487105d4d62eeb94a34c5bd98f2499f0ac65a806a5b4bd759baf85ca4d2e2db93f7f4459d0304dbe1c1d89403640c03ec766ee062de8d49646c92bab95e7aeac27597dbad1140f941d6dbbf655f39b80c8520a0e26bc96374bc0fec663439e2fe174bd7b06bd3218526d95e928832e92ce3d9c33f23eed1213e57814ecaeebd0a750f941a5f02a23f98450e6b175829c9f31af79ba56d420fbb4aa3d506c997eac23e80155c4b670378757d14aa4eb42036237964f65521f92d7f90e8ff19242ab3de2c2a7391af4e3fc2424d578c39f9f388ab8b7b8f78eb43cae4bd5821c28dd726048932a2af8cc96946f0772e865f3478d43d6cd8ee11959ddfed8d87da698be8971c38256c8bd79a17a439c6c76538070da16df835a4de44089ce98f9d951e577ef6f68825bb5cb1c27edd33191449f9c30026464e0a7b22edb0226a6330e5f48e93c213e3f4d1044a2efc76c0710cf000989fcb5821433855bff64c37d92a5b09e010f5d1cde40f5e072f025f10bb0c32b0dfa549aa023ac26d2e21687dc5827d938dd8628bc6b640394a32c747462797c1f15ce8900d1621ca274ea9cee0791eca35fe978cece5551500db8b09c1ee861cd5abb8b4050e0ff89e62cf96dadbfe288de7525d414f11f9e0cd1204339257e82200e9988a746c7ee9d91f218c6991ec35cac06c84c1762a4a55404970d433cc4de29753fce5405e3720daec4020e13a7abb7dce639cba8b651f1df458cb9da8de41188e45d868b178c9c63fc44712e8b83d4ffcfba419d2a3a9d4b94259fbfe393796373283977503f8fb3ff93a6398760fec2af1dec908e1248c7a730ecbecd3cc126ecb3adee551ac5b57915a3d738749158cf6f0d158099546fe23aab5552bf84f9cc630b430f9fa964705009945c5ab870b82a64e3679221ddeecb5e55c20d74ccf1e816faeb425053cdf11c4a902eaaebf7bbc8b80f3df4b3eef815b7a939963538cd95b995ee3d9a24599aef1fff730ef9d6390983b778fb360ae0b12076f0880a4c28ddce89dc79713c7aca6eac43081dd88df83c703a3124c83f5475987ca7ba738a68ce3d2301287f0e98017a4e60fc96a09eaaceb51111fb985e78f9ca4ab4e0475a9a49939d1d284e6014a8d9f58508815b03da2c3c9c86fc29e68211893b7d05172046637abdf56d32ea0d8c46fa089841e938a482fb8dd67c071541171b8c1cc4690bb8e08530a1af4024047ea08e2ef18bc1911935e9f0bab6bccede3d0ff9dbad7972a6555a291abdd51b3ac4e98bf8174031ee030d810cf9c03a5f23e70666090dc6303d37b49b76014dc2dd368a06c257496123cefba64746b1be1f7d16c71cd3ba87589f9617c6075675762eae07a9bbdf494ae885a7e9739a1431a5fd0beb993f55545ee3198fa79eacf36f50bc81fafd51dceab999e03d3644d980f52f6c270c2838b5b5e3b35f104b7510c5da7587edc01f10e1dbf3bd068fb1dd962984d6c823bfd0dd203ced1f9e5ea500e6666c6ad7d642a6d1812241619ccccf6ff995cd450235a5bf859389dad553dfa9bd744afa88003232111383cb144e0d7bb4f7e7688409a07d28bff22850e635d2165bebfe6c3e0b2f9452ade9dc2619457e27248d5da6187c3d8abb9e997fac23164ac407cbf51a0cae37398e63fe60dc37a6f33181aa47086cf782ea7c0f78947951d56d6029f582d738283a758b24df21880dc276c6a5341ad89e802e2c92966071439dc104f4e8d64b0022d88172bda7531f5099537de101a1e4523f9688649e0d772e20b3b4a62703749095096a3bffd24ecb42f8354ac78a282dffa138056d61dafb204d6d5e1c499549180aca5ac8b221121ab9ff00da67cbff66eae619e1fdd1ff2da081fe962d752aeb8683ce7043e6db13500c157ec42a5f392ac40cdf33c6f10d42891b57023a444d60bbaee7e175737a969934ac60748062b5ecb74a6908f8641c681977f209a7099841cf1ca9f80827", 0x1000}, {&(0x7f0000005540)="1fd76d4732f15d821d1faa63c0145acfffff4f13f71b9f96cd6a7ac581fc3927041a3b7d3396fb3f4915dc28efbe57274e1eae0e9e7699d4e19f32325a9e02d936a6dcb7c9c8a37cb0a0b2a142ac67805bf0e9b7dc8f28073f0fd31799f8eb1eb2bef186c50c637989fdd941235e1b6076a23c01083945fd9172643db465d54e2ba774c552c71f102c93493371993e9e7d90784948ab166954d827e8339ab7", 0x9f}, {&(0x7f0000005600)="6673be0b77c6127415a8fb6cfba061e974747bfda563f5d2b22153265e11b910a535da699a3c4305c96d94c2c6cdeaed52b40904", 0x34}, {&(0x7f0000005640)="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", 0x1000}, {&(0x7f0000006640)="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", 0x1000}, {&(0x7f0000007640)="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", 0xfc}, {&(0x7f0000007740)="8e6293eec4847da90a0d8cd7322e364c84261f2d45a16baaf1dbe1e9a523db9f4da02b328115d0ae957e005bd461c4ea2f40cd4955cf84ad1ce4cb970339e31399b3723a946f54ec50c5589de5f0d1eb7f7c6d9e73f6145ca2118da9845754076c4fa71aee6c", 0x66}, {&(0x7f00000077c0)="319088b6fe9a38cc092462807af76714e89b1cea7c95fef0cf7bbe2dbbad53ada24d69", 0x23}], 0x8, &(0x7f0000007880)=[{0x1010, 0x107, 0xfc000000000, "6bc28ac492f1ab9de40cda2ad810eaf73333e48b8784e9545dfaf67085e33f898a112a5af43d466a9a6fb89e4eace0f4100e2d8ff41957f63152a28cb21563311fb3a0a12dc44d2734ef9df2080a9836b742d178412d187fb2616bd5b0e48a5a82dd7a70bf0d7d7566431274fd6a834059655ae966ebf1311a4fed2b4408a784f82521352bd7cced143dfb6c2a5d412ca8143efc402b38a04d8ab0009fcb137cf418bba0b55bc3906a1109762687abdfb2bac52024beff5a0435311015c539d66f0ba8a9458fe7a7513069b8d137429423a308b5031ff1edd73b0da7d0f8e3024e0b831e028e7a3d1c1aa3e769f4d590ec72819d006b523e6044379fd720e8f66f47a03525c4e9a224540f381ed824aaa9db39008c353fb595f0e7987ab6a63ba43276023fd1dc6a4395a183a03c68a1281b7e16a6e935dbc25b1c6cdfdd869d8bf63944afff1df6d725aabcec1d950c669a509d3f021c0c523d61b73e47a2bf90f0990dcf9037c6673adb579dafeffe92b047a125905f3ad14f5cd0eca12b266098097d51d4cc0fa9d0050af0df92c4618ae2f21c00db5c1e5e49ff8442f0271edd99593a537d0588d56261272ead69ab8a041f4acec45b1be99bc20078a2165451977f86b2209348c8b9aeba1fd3c6aea139def5c9b507d597d2d463c213247ec9c6e35551c01d205850de556576e35d236d470831ce478672e9289585d8a027f0ab64b0991ec578f5b38c8c28e5419454377220a4415641984b2495c1eab2542d328e08f884e7cf835d97bbab472ef1a2cdafcf49f63eebbe8c089788d8848ba5b17c077564f4087e097019822aefb8ea1c6fa1b8a429dbbc8b219802d100cff15ee38eeba000182d6739c7283fd5f3747c2191b8e594c05eaa603adc397910bc0b3cde6cfbfaa98aedaa7ccc953c348e28fd97a9cafd624b5cb7205310b177022c0fb66a27104cbb50520a1c78a869ef55da8752d32f67f4aa1246b2882f4726fac42cc7432a9e2d5e982d83b9fc7caf3bfe6a78e43be236f4feb761a4ccebcfd765b6c2b6c944d103fc32a5eebb38bcc5070f8ef10da7d158efa969e26afc19c322a2cbc1395990e810af40648b5bed10d023aff323faa905c952c5ff554c3dfd7c01074c9387aa501c5cd7550d555ce335aef9e65c22dd2a2d909eae953a74c0cf3d498613598ea6f6fd6d19c5f60c42b2e859b3c438401ee19002789936591f42338a5bc97eeaf5aaf9bdad7adb08f2eb19cea035f100c5e1f06d64e3086a77bbf26e23292a62e14a9da27d62958ed3b2251447bd56c6f6cc87036921336ed3d7fdb5a0a2230c0848d4b560774cc89f6c12d2777a4dae728e9aacdc089903fc256bbe183b69424b47c235b11ae08ec81f548c021579fafd4a3a59a91995862d8cd237878d0be740e4dd49250657cdc1f465911fd5288ed0873f22cc0c99d215005b8d937ae30a327f1e57d38ef400390df16727dc22f552e8885257b8ddf36c978244423cecb458c0e9258badf7861cf346b60f212a597fb3de70fcd3d61b4038876e1607b473bc809306820bb8a7bbc8010c910c8643b73b7bd50d40b5a271f24b061f2cbaecccaa0a76430ded6ecb3fe774e19c61c90f8a6be46f01a80d97fae39eb570b94e98818d379c5586d61a4704e9ad0ee8b76a79d375270907470bda278909503c5f37104eb2f2210b50de7490a2df7b5eae2da14aa6b62f69abac2e57b2d28fa8b5e83ab7d982cf7d16248ede5153d99913a38624fcafc1d7eccba78c4f87aca066a57a16d095dea8be83c4369d35ead9679e6138eefb9d0884dd775f8da26c9078e1daa4b8cb35fcefad9d522ebdfb6e8d1d7931a6871ab4efc466d53591c509818d7f6c424fd46718f1d710677f2572e0b20f218df2777ccfebd2b5fc8054f22e56b258cc2b35909c224fc6787bbed80d6366ea75717f257bca5e94c245eb9c6e53667cdf61692ec57294a23e291ad6c0b51e7009cc904aebebcc4733076847b2e56c62c1f2c45e8b4345f4cafad84ee47c28203bcdd6c946a557918bfd079c8ead68e6ec3a1d1649f9f334db4e41915a41c712c74c297a2b9211ffeb6b5d665359275ef72191385c96c5fcf8e8c4906d97d8a71bbd8a3af5d117fd017b7d3b7b5e4029a25e4550ab9ef0bbd40ddd7296332c7d80f1c84d7b958179d63f58f6e2b0731798664866a8f0ef49d608ef1a02077b8780c06438f914195b6b6a263dbad5dfafe2c168a97c0f19f2d74b0bc007cbc8d8165be45a94a5c40f98f48b0cb3c5905947934a453ec35164d5d2a8e2c3b695d424d9c507a69c7ddc5af25fc90b8c81bdbd03667f5e89bcc6bb9f68e0ef57dcb9d4983e5c9b5df5d9e57b15cf2f809e44fcb7c31766df3183575532c2c665c4dc5e95c8e09ec4cbb30bd1ae4c0a650f2ea347857e850fa6642297834a53ca283ef32cefc0873b44f95408082e5e054b3e55d53a97466b7986e188cc2775dec40bcef9c99fd0577a63b269a11328ef241043704361543cd600aa0f6334a6f431b650ab658c5b86c67ac5244a3daaa682df70a1fd182bef262358519e072383fa19cdc8d0f312d648a21c66b0a5023dbf5509503e7a5c88f36aaf45033ae140fadc5ea4985474239b697983eb726681e2986ef404a2de59db624482cef3ab14fd7f55e49cce22b623df06416221c49e5a4da05ad5b4b443efac995561ece684be2844d7b85544c45ef15781a9e96e6fc41e08a800564e736d5c580aedf6813fa22b377334920239952e04ab47601978be910793256503ee8a432fcaaabbaf704f849f226d0149e4a369a90d34f29eba47089f5d5bb5331cde83236fdec8e37d75550ae61f258313b3ac8e4acf7e0ce14086fd935754e3154b445d8ab7868f500f60dd1a3a8a06accd61feb1acf2e10eda1df16ec1af854ebba2c807b6a57e72b94a2b9a1c29aa3def128eb6b7f2604ae2f23a5f012c89d7d2408ae1f61e3cdbe4da13948a334c7385f4e62c817e99226a9c3aa3f444f365df6f7657f681a592ff628936427f385fd3b1a29d78b0a31e2c96e59d4b44bf1200f9e8f65b65283f25db0e0492cfc9cd9f5b16c0931bc2c633a1eaad8034645eb7363c6342b0b53647da7aec0395fb13820551e416a0bb1298e9bf81b97256549d6a00ac8d0b17af4de36acd9acc0281cbe5368e93b548312e0c8805a1cb8a05aa5f0911ee244a7b731ba0ddb9f61228f5c3fe393e0d4981c2720ccefd8605b4960a02c00d96e4d1bd9f1cc674f618aec856160cd7c2eb9e7fb2a86298c09aad10f0f981fc00bd0a4cce4ae12f49ebca480faad13515aacab00f1f6632629424c3d09a5bdd2dd02556b0eb04ffd183043b85a92cf41e0d61eb284b56f5df702374300449612772cbd8bb48a03050cabadfa594c094a02828726f04864e6d6f5e832c0340a49c349e38fa5fb6905d1a07b41c5f989b5ea2e7952f2c4d7fef57bc384ea01afb755cbca292468301f558ffc731b928d5a83297ceb5ce7e8fe2efd675c68720d7c2b5b891edce5b4fdc287a34a3ab62ce51a972fded3d40814f0ff12e653b987b7939075a73e4405be690e9f702e0b2fb5c930e9a7cc4a134076980854ecdec2fbf4debadf9e5406100bf9ae29bb54921260fa362c532422b77e4a3f2f820c0c886333b231ed41563e2a43d17b9fe2e749aba0412ec2ba5966266c94d6c7e899a1892201fbbf53f8bb57548d0511b6adaea0f11ac53444259e2e6cf48980f61b2836f1cc2c84386e1fc8b3e8472e1b03c42364de8ca2a0950b59f855ca7ac4b661313e1739e0920aff9ab5e7112e2bb3205e61690725960e31a35ed483ffd56b6d83987c2a8c4b681cb63dcb01e7b21999597c758dd353bc7f55a386f3d88b0a97b3b31f957ec11fec741c2881763ffd17be0e14f778b19a00fee29731c9907c7f691ce4d0bf2d00f4a1dae4c4426cfb43d406da944206575bf44471f33652262b092dbe81469c8362f1beb85d733e48cead2e5d46c7a9eb3b8555c04e248435538d55c86cc92cd0e2df9b0892986b47511b86148ab2476e0eee74f9c20cbec52bf152e1fb2c9e59ca98b5c8c4ca5bc97e39954922c89f2c691690c53d2112800bfbbcdb0c819b8397191af265fa5e6239e21eecf6a2bdc467baa9b2e7ef4deb0f94c831b33ab59533b7fe8950779e16010ddc4f092043c83441d6e2f0c6ec0e9032b3dc77c765931661e7072f16bf174c43924b00dffba96f1efd70cb468dc490b607082a17d658b91af39dd04fe1d51d2a3ada1fede3b7f6d26c5ef8c58089c051918dbae2d1b76ba17a345d3b535666ade27fe795971c0670755fded5e224410f9e2fff0c7225acebf0b78d95b3bcb95476191b793f8aa250690b20cf70aa642a363d3a2c8ca7adc328a00b0451695feabd24ac40d141c1d1f2715c4c1012eaf1812d42ceb805d71d7de527dd2c648e5cdafabe454fdec052910aa5a38d57ce4ce474e786debf3852b4ba8081c334e0f621d92e20b45301d1583a8471f6d6d56d9440ca47f8fbeebb9c1552cac69786bfd5f7047d942bbb904cd54139013f9f231fd7fe6d290f1f98ceebf4a7648aaf814d7900bbfcf3c1836670982521e75e3e0fbedf394e0b6212f744aee65a41f8059493aacabce1b2a170be1894f643064b4174bab1f8d342acc98d7d2488a0e831baa8b350e1036aba85fe243296c0d9ff1a0cfc230da3d2343b774780ef7b7dbd852bf352b8e17b4062f49018a05b606c641b87dc991c0ebe88fa8160cc8858624f2da5fbb68da6905a5a69ab80d0c27cdf9de3d941d5f3acc6c6b3b93753f6e1dc256f5916140a1b8f712b7a03577dbc1b6c414ac8b2d08f1afe7dd3ec5c04ecaa3b3c91720a348e2302ef04c716c246ce8ea25b0197329cd9eac2efb957e26b821f0311a607da63a56e22119ff288e9a1d123a2c76eb4715911afad028f69347c42909d998215a05dfc1d173770766c5c5a0aac4f841cdc85cc6ae6976bc96d1b06519cfda5c60bd5ef23fcc169e6c04747de506fe099b12ac135a6baf750e28a5aa4fe7a2d25298fba44592318e39c0e326028f4077541b1a514d359d3047c4a1aecf7cc6cb2cfa506cdc555803174c5af33d9ab620c6eee433481edbd85ab4673f96b948fee7b1d71b001ea8ce9f9fffa0087a3223f10c4b785ccf1e77ea4ecb7337ae5484668fca59ca5dd88638511cb21e17ec2fffad30d16ef36bcabe3c526e580c56b03499a3bbdfe8e40864b29e457c9492fcd5d2e2e17306e27017f7b7adf839cd379350e3636e30294597388d4edcb278d155848cd3b4e861e5f53e45016638197b1557c0eb52d04d0cc5da953c96f4cc1e4ca6ade8de05c2876a8458a8abf0f415575170a3e51bd7cc96dbde54e5a88ec51522128a9fa845829bcb74bb5627c2b80e6867c0a36d64a1a70ba88b7cdfd89c5f4158461b8e3d29a21051eee5d2cb59adbc249da46baa811142b29542af33e8fba0453fd28174d95d6086079e0bb6e138d2cf6e82ad4f408c7100135f24ee72ca7f89a9638b2d2cea492b35af18b0ddcc50ee8ea1c8ddbe688b1e8ea311ec78c81e044268c215b35e8b1151dead2ea1362ff7325b73a9729100f5d037eacd4299c341bac8a86e6b2c568dfd01e56efb027b797c998013093d10d5f44115990704ffbc1ef6e36f9862598f82df3df21a8a4d974473ea5f3da6ac035aadf165216cc43f9e2918909cd7688e5f54b69715007dd49e355071e6f3526e7d58c5641de3f6fe9f9f7b99fd84b7cc106f462634006b0434a39ed0d41cb9ddaee8cc1309"}], 0x1010, 0x8000}, 0x3}, {{0x0, 0x0, &(0x7f0000009c40)=[{&(0x7f00000088c0)="b164150033a23f022ab99396a3ef67b1fcb2dd1499210982d3061a284153c1a8cb641c0c94a55993840be81fe0ddd2dd6c0d9d1551f4e4e52ad931235d69311b4ffa02f6400bc624ce3c951966eccd702dc4ef9005f9e7a23cc43ff924830a39ed0b6add1972198ae197c1c62cffb97f4fec94cef58f1a623f50374c0426f9408c897fe9b4f371df42d971760e0b2cf7957833095f084df3d64cb8f7fe5809840da2969aff96ce59877cce6aa8e97e0cae99cc6df1c7bb1e0537dfb51e79f91a5c6704a299ba10801f870e20f44e75ae0bf3e6b36de7e35e48a417c089ddaa0067b725fdf76ec6596ccfc9c031351105a8c2e7187cb88d3fb91c0584c61262ba44e6014828618e8bd532ded82ad37fa8cba630334dd95027e02f7b1a002748105deca7f36bea92ad68eedde7be1d31168e73f2e221b6b8e4322d516abbac528d3493cf5523b95ca589983ed3ca6811bd982fd39e5581630d3f5d79bebc773dbc55ff90483dc11e8446a76fc00a66359f7b9d3e52d9b9b8585d630c9a238d86c01d5ba27606c85f89e5ed9f77d875260c9fb077f2b4337c1b43ce069d61583661a7ae2811d5b0f7dc959e297760897698271f8f0e621d9b11c24a9182c833fbd0ea5bc86da321bfed7a79e151461e6ec9524634463c5dfcca48c7f57a4c4bdc72aff061e2b5e8615ff8c8b820fe9ab39e427c502c01f72be550503f61228bc594e5e6b401a2c950d1b3a47c432a7316bc68354c22b5eca02cb5eec37bb09262defc823e4533cbaeee5d31a1620e5396c5682250c4d662e8314ce388da6b75e94285d49a27e38dbbec88d1fe2587748a017601a6d923c33cbe3655fd37bd359dc321ae30064095848ec7d2f31dae2428396e3314296a4744f18b60cfb013cc0f010498a9d2f8334d3c634582ed78f56bf2cebb70f46aebad89621610fce10a917606a1a7b7fd7a574b57d8e76c8a2ec86326963e2e0bbc5233a0d5984dfa6ac263a392fca8817ba87ca88310be8282b24abd7f29befdbe83ff3db1c5e5783f5ffa52d12fe83aad3c3fa3ba3e0485784371eae3fac1eb03dc37acb1c0b678081ec041d81750c3d050b2621ebae74ba197732eb153a6c95de8550992599abc248e72236cd8e6dcc56cc0b3c30eb8ca25406dd1e335ab2d1729f69374f12a40b853fe7d8e2048339dbb550116a4b9107d7b92046dec16e070cc74098e55c538e92fcee87749cf3ab14e12f1152e270a3cdd686a52e17ee090bc64bd43edf445f634862616268013fcf5ace069478dce45e29d75f77acb89b0177f69b5b03e99cb839f869e1094aec7903722a1eada65f3c72aa5da3ffd39618897a8d197a3e3c7ea1d63b6df7cf02a4199db0f95a2b4300a3e01e1e5d66239d405dfb41e344b0942d0a560f52f865c4768ecdd299d5a9e4bfeabc9c4e41cb7c97f0da9589f5cbbdaea2013f5cf72e2df72d6d6282040efa046dfd0e77a6d5fe112fcf4a1831a467282cef61ef7c7884b63ceeae49fb92bede0b958b31443d990b587a93d5b03a698f05e33c5eb938e7722be4b94f0c5f357957bceba223f5e820ba54077c644d6126078b96f8fe030417f1985d180384ea697043599ffbbdbde0300b490deb96c1adaeaa89815498e7e19955ea5fb47dcbc9ca976dafce2fc2e41906944b303b78768720f1e5e58449da05168da37b224ccf9a12d773357ea85c68c1fd8a71002b6e9d8d6e07f92bdef4f6a9cee45c80c01595077e049c3341cccf9abc0a96fc4320ed6aab4dd09af76374a62a1972ab6fb108b1554601a34e6aa7ffcda0aa8ec1552a05381c15f73022157f516e2ce241f00815e42018cc4157f476e24238b035343d8dc7969f615db8a960db22405cd913001f8b51bb54b88881493cf5cdf18263fb2e840edc28018346fc6adc3d3471883d458f4b0ee70c623d37f020df8e3b4996e921e7ef28f11e52a6028c368dc494012cc5f38ecc9854a12721f8ea4c6c1ca04dc1b76c5289b92c70e6c5a03fadaecbd1f53c62c7384118e8789e6b39ada3a2ac9be0e9a9d513057342255317f4a8cd65e25fece25b9a72ea72d1321e1f2b571ebfcb2e5a6fd76dbba46e3e4ee6a203cb954c0104f22ac935790343cfc92276f77f7f346b8e1fd3641398eef5162a70651753e8e212fe0edfba03b62ae5681af9ca90327ab6b084c6ad73ffd7017ba2cdf50bb22e70babf2ef99faa9b94283b760da322ccd5df18edc11d85496415425bdb3dba2ca1abb3fb542fe2d489e3690f7283b78fdb474663e312afb2b16d10976cd5da58b0026ddc766097eae323896ca286693cde29cf9fc9f43fc9929936a550c8bddd3a20ed9cce3420adb5e183731c327c1372c5335f612d8b992a77a22b7f15f4f55dd233b056970009ceb391f820be755a395435d23784ed90b305508e5ebfe6d1da8f670cffb672b43e0c24545ed062e10a5d22c00286561c879f7ea0aeab78dc3aafd2b6b990050ffc854c9d4cf9d4f8e69b80b3852d710f9993b9e4a74daf074fa71667af43c4676bad4b624afce832cc18048c833535f2fa8f7ae26d001edad71f8282512e741b459ef900d5fe37912377547e1346106ab1393fb97aa9e67489a579c4e86809d86a418feda9bbc8b1901651de14c6cb52959294ce55843705fa833714049d916107db6248b382cd1a7ac581bf4aa342e9eafb397d9cbb42ba84d290b1d202b464fdc0270e3bf02a1b95d391b8cf0e9109b0b6010ec4d797349c041e70453f1f0e0d2596363a5b3df68894de9e9c83db8181fc0911433fa571bc669c25f3070318da49ee82764dd8d7e02d356989364437484f28ea57edacfb35bb8454c8ecc2c23937dd40581afdf2856710b98c69dfb2aeb86741c9bfb11d4a0f740941e0672eb33c4055d590e7741a552a688cf26bc90039032dc237df43cd3f02775db543552e419e2aad8b6a7ea244db36f08f6d6abd595a9e5ce6f329bbecaccd815715d99d2820af38bf0574845d098d5dd75d1ff2daa69741829ddbaf9ef60be1caf1b0baa08c6f6e880eedb68f59e497f47492ecbaa9675475a13dc539f47b4ee54ee70216714710bf781899adb061cf674c188a302bf23bf62ccbb749cee5e8a1e31aed29b573928c57727be277f182e4e1c07b1dccf30c14a3edf8e671450f347ecea51b68ab97bc6c739b8c06662a32d095b210ef4f4b341b1308cdb9f3adb9e3fa28cbb2452cd3f12fb0790ae5725485fd39db635c565d105bd4c92767509c739e7630b097f03f09ea717fd1ab8e3f812a3403ca9f05bc62b20381622a1f0fa6a9c5349d620e2518d990f00f04fdb3c1daf4acf24cd62667a51e84fb94c6f58f69f009e6a78831dfe9b54ca021fb0266af6d570cd7ecd7c6552baab4a8d1223ec8cd3e4cf18429b559f3a41b793127cdec303592e97f7d62d60d4901ab031c1fba31d5cb8f558c06d4a519b807c15f5ff01031cfebe1073401be1362a8c9c94fa66a0a2dd5ae04a7bce20927e3bcb3f478ad81e81b07c9825205b3067c8f2455e9abdd668085c92f2eb38a95bbf8422e59b9de88f566ea66f1462c3de868de97de65d92f2b4f754fb0f69a8678f23ec394a029da871cb4089d33cee9402491628312d0019da7944398e0a357b3eb3c1df58a7f5203c7a5b0c6510da5d4b291586b64229630ecee9452ef38faeb505336fee8fe2ee54fbb105e851544c7f1c085fb02c1ed5a57c428fd0c3f4e880e96b83e22574bb057494f19e92945f212523119dbadbcd278d44bd0aa460341ab4ceb3ef1d06c0f29637d8298f62b792e848cfc3dde604074d9fc151ae87ff23a7076cd139c74186658a5c2b141e7396ed738fd1840e0f8aaf67bb86ec7a0b07026e9328110916f584be0475bd80519aeae64bf2929e1569306b748d15f979e7103c732945544baf636f6e458a7f5e491373920602b25a9b4ef03009f069dfd4fb4f7121e91db6b116c40f6fac5806f2ad549a0ce65ad6d137436748fabc07c350661dda0dfd31db25b724c8f61f856f859fac310e32af9b034294c425773d00783370a7c5371d164f7f19d20a92ca8a5345d6fcaab334bc940eac0d7800ab72c77bdbfd6662e43a7681ffdb62396af1472252e7ed2ef4bef6123b099cad4d421a37c652d964cb29edb865f620c70224141e6a0638f327a24423d0e7297fb192cf05f7199201b3676ec7f1a9a168d46f7c9da66c70a340c4a46426b1f6173d24bd586a6442528cdd0614b9763136081e2aeffa660ce0215991da5d3fb675146417c8aa4f4bc1350d3f5dcb481d30aaaaa90bdf9185fe4aa470d0bac0e00bfb743e1274962301706a0e8e0b11401bf67c68f5b511c3c67896fc919230022a93d132f5de722a670a53695c63c3786285f908af01dbb176058d6d17a35c7251de0a916b3b4a199e881d427356f78803fdcbeaf61ace3ab7eb156a4b8e837a7122ed768d8fd899532400fd1ee1e9fb0d02f488f0ad09fe803d5d7fb0100a11de781db3277bfadc0d6a6e1a02784ce4faf87758a0ee097b3d72991233e75886cf7d0858840cf9e827482254490c223c76fece9b2fb6243867a62fa9fd97b49d89e8bedaff7fcbe12ba9b4589602b94556396347cff5243f10791921c41f5ed66651bcecdede186dccd3b8906a03eca16e07fcace68b873550c983ac01af7ad01c5351b215dd1858c784af2fcdfccede54a2e9e7cde4f8a4338c1fd2ca15f78c4c23f8eafc1dc71adabcfc55000650b153c57db87de7711140d13bbedee978bcf24995357bd9462ffd2568fddb5d2ddcd09bf17e24723dfc7439d60d727d476168d8f81a5b1703ecf06901d97aba3adb8164d0421199763370245c436466dba503d0535aa6cabb062f5b6214a3790629974efebd5f588a2c8ca96eb0afc69ec321fb70aac948b3409953c2182b05f1eb505ad14d2e80b7ad1de4dc3101568523e7e9c64a762c1d861ca11db1a9d9faee077b2fe12de66df9d5ea9fc794a09f669398539a0e21cf890b3967d287bb3f25d98b66da57e5170b946f17dc61522d6c5301d702a3001e88e8b7374a9eaa50e2a58ccfee58824dbc998b2913557ef2e61b785f415132264b311093348c40462e946a4de8e5632aa83c344ed6b240bdc6c5b8dc4662cc3332474d1198892707a8669cf3a1150d5f4479a19638b79b3e38d744da04f2ba953f6cde48651984bd6357e441eed06ddbca648766936caabd646f5396c52183c4dd3ec38eb8a627de3d2afcd8025b817c310bbcc97ab800eb5807a2df69f9a97128b4aaebe107a64ea2c1ece567c497826b2bafbe0da7af80620d3dd15edd07190ad11de1fa12ea529326dc71b6f87f2a9ec37921cdc1b3ead867252e565c27c37b644404a13fe084995f0af1f389179d0cfca44c9ab9df410fa2e2e3eae750ce3f53b7c461e8848ea36b229c06b9c838852f186135e25348daca6366cf6e246478654de4bf160fc3481f7fc02e37767237c44b325753eb17ad8050562cc7fdd0f77bf5c4b8da9fe22ccdc264c3d1ea0283fbcaf9124804f724fcb74f087e2d6526c929d06334867992dac12ca8e8eb5fc9cb8cb1127a1110098650cf3e0c9788b68661dc6699bd5b112aed0b13ad929504af79816ca21ee4d087c03254dba2b1795774baa4d7e5dcbcf3f92003db36a5e5618bb85e5e4f07b77aba07417ec88373d52c8839c8e28b01c7dd80e2f8533a892e2e604660ed9055637a371781b3865afa268ec446c8dd822665e38eaee6545024d3f5b368dea4a695d0b4ba3b3d573760bebd779faaca9169742f126a9efeeb24", 0x1000}, {&(0x7f00000098c0)="c5b86ea7768c316c1333d74e54274cc90a0fdc414f55f94494b6db1e39630415795fb67557e17219ce5006ff7e712b1eb9129310f038e62bad11de09656693d1260a070b352da5c508c3f072ea3b331598bc99e69db0cba6a88bcce9ffb2f23d26e1276d950b3a027ddb0f3690da5ec13e52c140a473d438b4a1363fc5ead4388ea7578321c906336ee0e1c4dc51c0120b93a9c74a6d7a6147613ae72b1aedac7240151eb401cefe13be717612c4aaf1d1e21bb25f9bbca9d7ae5a92e8fa3bc0f5e48547fa555da3a165bd31784dbce6076e3f2bbb523c7c9399fde59217c3a046c53220e42406ce", 0xe8}, {&(0x7f00000099c0)="200e09fa10b4fc5ab78065937a377951bda983e61fcc65271f0dd8cf3ad30d1984a8cf09052afbb00a02ce52fee864935e7512ce481a8b", 0x37}, {&(0x7f0000009a00)}, {&(0x7f0000009a40)="748450a0bc7957837e67a6555ae450d561d265a3e6ee13fb22bdc5d89954a2b3d31cd012fedf1e5c1d2af4baaa99ab7657caab7ed0fc75a2039c68f7eb0473b000179a14cdef454f4c97b25435a56f8c14cb683af44d47fbdc0cb614296a6fc0f5c900ffb2712dbbbaaf8d122e898351e32dc90558e265c0a74bd35a0f8bcdc302bd83e075c761b155eb51e1f8baa8f9762d76e7fe1d3a429f76bc6be3f32538af6bfab56f37101949", 0xa9}, {&(0x7f0000009b00)="59b2409771e761715133fbc2e1f1ce298926520fb37b859158364a773c06d167782ba2ee14de450aaa13dd067094b26e134c626efb209abcb541d5307eb06e599447b221d4b64f1ccb61530ed7fe694b8be8416065488a166a1819b86f385c0d61539b7cdc0e5812fe8710ca7b56731b0e33fe8ae5a5168ca1e03e2574bae035658364e50b27022e3ab0fccb438c05f0ac29520f38a8c4dddf551f519defcca777d4", 0xa2}, {&(0x7f0000009bc0)="c9aa44ab51f0eb29a8546210120babfc51fe2e9ab940f3cbb826fac6c9a83a5ba7a6207712debbd7944e8bd5981a39bfb0f6a8368df5cbcda0f3bce38ff3f5287d8fa9650fac5ec713a492113308654fb33379ab", 0x54}], 0x7, &(0x7f0000009cc0)=[{0x38, 0x10b, 0x8, "97980ce7209becaffcfbee826649b0366160771bcf5132f8d714a104dabd32ed9d7d2edd"}, {0xa0, 0x113, 0x2, "4a57efe3dc58c91b89efcb1a8684502ffec10ab7c9726a0fd4bd2bba70643d1a8ead76325af1828993cc5b94e471baca14fdb3a2c51eaf68fdabcf33d9a3d3947480a0e2dd344a1f9619c48c0b7075c5b3641e60dc8fde5f89c10b9486455c85903cb446fa1048bf59ccd448b700a1b72b2162379129703ecb311fe60a58657189d6c94efbe567cb486ea70ffa"}, {0xe8, 0x104, 0x2, "80a754efee75ecd3601d4aed2ec4773276f2fd18f4bf43468031c6b0167ba227068a6b6ed03c5cb3cf9467a629952abe32fef1ae13ab56e747d878f2647e9cb39f9f3e308b215775dd799ce48d620de6d20d1a6bb7aa7b9594d33487458d4120283497b87f60745ee94800b1a03ab1bd41bbf4cfcb7d7c943c623643cd1d5ac356e756cb8e41d7f2684354377075b27ee2a220ed07025dca167db1ff94d7a3ab247d4b74be2abd6e970cdac77938341d54fadf3ab2a19a51cf7582895ee5ed8847272507ae77fa1ebcd734af84b81c91d1"}, {0x78, 0x0, 0xffff, "f30463c6719bcd31ca3e9442e9e3179069ec4dfb418af63a6a7cf46cac01ee65e42160f96c7795c3c51b2b08ea6981402574b006b2beccc8aacfaa5256c402561531f2b2e372bd40a5fab0ef6fd240fe59db58817d25db085d9de3d487fce930516d407baf"}, {0x1010, 0x117, 0xfffffffffffffffa, "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"}], 0x1248, 0x4000040}, 0x800}], 0x6, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup2(r1, r2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x40010, r4, 0x10000000000000) 03:38:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1a9001, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:30 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb00}}}, 0xd8}, 0x1}, 0x0) 03:38:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 758.820248] binder: 18927:18932 ERROR: BC_REGISTER_LOOPER called without request 03:38:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000005c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x6, &(0x7f0000000440)=[{&(0x7f0000000180)="8056efdfaa46c5ef24ab49ce232efebf3c0e07cb80363700e14fe9f3e676b6b8e296af87461f5ee2fa238e650a5f3c277a3bb936cecf2a4764ecf5756c8acd5af4748d3e320eab528204fecd55ae07b790f8796ae23d74ac6fc79da86eb5038fd8f39198c5e7a728b47c70df46d39595b30d89fdbe0ec5bc0ba49cbbd7a01cb9d9abc78c0d630d24ac16c75176e1f64934acd3e7d928424a98c5e3aba0db8a7028e6e193bb53cb39e77c9d213f968c4e1ebba7fb3f0e47bf9013dd3ee5d19fc74856a2cfc8cd70c528fd7df1406e5846047f0f6e2846a0023c4b0a743d4f858ec8648d78785eaee17b618d29aa6937d66e69fc5de11f76b6ab4c50", 0xfb, 0x5}, {&(0x7f0000000280)="890d74f97b2b5aeb6e7d2f845410c441ef12e16b134df9413bde5e70e68aa32ad0c02b2e2261401d32a694916a6e41de4d39b1f7c1b45bbd24e8623b8e27714b4d7f3f9618b96820b57b150fd00fd8a2ca1bf38c5be36ec4a770a82eb5551a", 0x5f, 0x9}, {&(0x7f0000000080)="3a5c677b7c743024ccb4dd05263838c3ed1d6a6d166a25aca927e556a7", 0x1d, 0x3597}, {&(0x7f0000000300)="86e1033fdcb44cb2cb0f5ab3c4a0783196f540ba047a240e9d03fc740b5f7897a33f71ce26fbca129a248f4e22", 0x2d}, {&(0x7f0000000340)="91fb57578e", 0x5, 0x8}, {&(0x7f0000000380)="d26628034cc4da24605ef84a3434210aae48552e2cf6d9b4f957c977d48fa9e9cdac339dbf6e99fd52703f1d59766a955527c236beda762574becc6a4176e0cd9217134c325b99794b4a73c5a6da792ceb7cf6ddd3ff823996522e021481f7d1898065b57057b8115478811a8207a5d9243f2f5798174af1d0d97cf47321245168af6a48bea044f6aa475b0e39c8ddf27e0914cc8f2e92aac63a524b081a0e7694d62c74922820cc4720121d1bab516e62eae6dcae4a8d8d6d5896a5e8", 0xbd, 0x2}], 0x20000, &(0x7f0000000500)={[{@errors_remount='errors=remount-ro', 0x2c}, {@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@check_relaxed='check=relaxed', 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x34, 0x37, 0x33, 0x34, 0x35]}, 0x2c}]}) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x70}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 03:38:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xa00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000c00), &(0x7f0000000900), &(0x7f0000000440), &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) waitid(0x0, 0x0, &(0x7f0000000000), 0xa100000c, &(0x7f0000000080)) 03:38:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000800, 0x100000000) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{&(0x7f00000005c0)=@ax25, 0xc5, &(0x7f0000000f80), 0x0, &(0x7f0000001040)=""/225, 0xe1}}, {{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0xfffffe8a, &(0x7f0000000580)=[{&(0x7f0000000480)=""/44}, {&(0x7f00000004c0)=""/34}, {&(0x7f0000000500)=""/121}], 0x0, &(0x7f0000000000)=""/130, 0x82}}], 0x2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0xffff, 0x3f5, 0x4, 0x5, 0x81, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x10) dup3(r2, r2, 0x80003) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000140)=""/128) 03:38:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x2034afa5, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x40030000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x10, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = msgget$private(0x0, 0x652) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/229) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x81, @loopback={0x0, 0x1}, 0x266c}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in={0x2, 0x4e24}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x0, @empty, 0xffff}, @in6={0xa, 0x4e22, 0x254, @empty, 0xffff}], 0xa0) r2 = gettid() fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x2, 0x7, 0x40, 0x1ff, r2}) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r1, &(0x7f0000000000)='O', 0x1, 0x0) fcntl$notify(r1, 0x402, 0x8) r3 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r3, r1) 03:38:30 executing program 5: mkdir(&(0x7f00002b2000)='./file0\x00', 0x200000040000) unlink(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file0\x00', 0x800080000, 0x9803dc258cc89954) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfd, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x800) lseek(r0, 0x0, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000000c0)={0x6, 0xffffffff, 0x0, 0x5, 0x2, 0x6}) personality(0x5000007) 03:38:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x400000000000000}}}, 0xd8}, 0x1}, 0x0) [ 759.611534] binder: 18927:19004 BC_FREE_BUFFER u0000000020001000 no match [ 759.618611] binder: 18927:19004 got transaction to context manager from process owning it [ 759.627008] binder: 18927:19004 transaction failed 29201/-22, size 0-0 line 2843 03:38:31 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[@ANYRES16], &(0x7f0000000080)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0xd}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010000)={r0, 0x0, 0xe, 0x100, &(0x7f0000020000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)=""/256}, 0x28) 03:38:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2002, 0x0) sendto$ax25(r1, &(0x7f0000000100)="45a3a67cd7190f2729f4b24a3c5932d844da8fe60bfc381cf1b0f00c4769ae1ac13c8386a5cb192e21bf6549301461317eea8e9ea343dc", 0x37, 0x4044880, &(0x7f0000000140)={0x3, {"a13310b0ba4c9d"}, 0xfffffffffffffff7}, 0x10) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@check_strict='check=strict', 0x2c}, {@nocompress='nocompress', 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp850'}, 0x2c}]}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000180)=0x7) 03:38:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1a00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x7, 0x8, 0x1}, 0x1f3) r1 = memfd_create(&(0x7f0000000040)='nodev.}lo,^.system&(GPLkeyring/security\x00', 0x2) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/144) r2 = getpid() fcntl$setown(r1, 0x8, r2) write(r0, &(0x7f0000000180)="c6d6cf05b1baacd4f81194409158a611bec3e64f904ec18aa0efedfdcc159220a2e290fe0dd297840328e41455f83457b4c2b726ac1d5bfcf85f5b5eac8e02a7ea4c835f386911aa24ec75ca43107b5376c0e2996dbe14241d249719b14ed1634742c05dcab49fa71aa482a87de80a52b6d28069439a02b875adf2aec57ca30934b2", 0x82) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) 03:38:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:31 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getgid() sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7, [], 0x1}, 0x2}, 0x1c) [ 759.748432] ISOFS: Unable to identify CD-ROM format. [ 759.752635] binder: undelivered TRANSACTION_ERROR: 29201 03:38:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x700000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x210200, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="f20f35360f0137c4c2659024acc4e279797905660f38814700c4c122535411cf360f1f40000f01c8c7442400ea490000c7442402f6ffffffc7442406000000000f011c24b9800000c00f3235002000000f30", 0x52}], 0x1, 0x0, &(0x7f0000000140)=[@cstype0={0x4, 0xe}], 0x1) 03:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) recvfrom$inet6(r0, &(0x7f0000000180)=""/104, 0x68, 0x20, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffffffffffa, @dev={0xfe, 0x80, [], 0x18}, 0x2}, 0x1c) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x4, 0x5}, &(0x7f0000000240)=0x10) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0x4596, @loopback={0x0, 0x1}, 0x5}}}, &(0x7f0000000340)=0x84) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x3ff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1, r3}) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x400000000000000a) [ 759.861641] binder: 19028:19032 ERROR: BC_REGISTER_LOOPER called without request [ 759.889553] ISOFS: Unable to identify CD-ROM format. 03:38:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1=0xe0000001, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0xe8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2, 0x0) connect$ax25(r1, &(0x7f00000001c0)={0x3, {"f604220461dd8b"}, 0x1a}, 0x10) 03:38:31 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x57, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 03:38:31 executing program 3: futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080)=0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x12040, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0xff, 0x6, 0x9}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={r3, 0xffffffffffffff19}, &(0x7f00000004c0)=0x8) connect$inet6(r1, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7f, 0x7, [0xffffffff80000001, 0x4, 0x7f, 0x20, 0x80000000, 0x8ed, 0x9]}, &(0x7f0000000280)=0x16) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={r5, 0x6, 0xfffffffffffffff9, 0x7, 0x4, 0x8, 0x40, 0x4, {r6, @in={{0x2, 0x4e20}}, 0x1, 0x7fff, 0x80000000, 0x401, 0xed}}, &(0x7f0000000380)=0xb0) 03:38:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x13000000}}}, 0xd8}, 0x1}, 0x0) 03:38:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:31 executing program 5: prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="7fdb1315388866f2b2062b37f6c486137fc4ba2b6c094ea288655f42ada00700a2c37f6e64e29a8c29bfbe9dd3ba3f5e0200003eafde59e9aef61eb994a8b28d4d", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x6}, 0x8) 03:38:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe00}}}, 0xd8}, 0x1}, 0x0) 03:38:31 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20800) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='vmnet1vmnet0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/#%*bdevppp0{\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='{GPL#\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='-\x00'], 0x100) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxz\n'], 0x4) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000400)='usercpuset\x00'], 0x1000) 03:38:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:31 executing program 4: r0 = socket(0x10000000002, 0x1, 0xb) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f00000000c0)=@raw=[@exit={0x95}, @map={0x18, 0x8, 0x1, 0x0, r1}, @generic={0xf2f9, 0x2, 0xc, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff00000001, 0x0, 0x0, 0x0, 0x2}, @generic={0x401, 0x96, 0x7ff, 0x9}, @exit={0x95}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0xc6, 0xd5, &(0x7f0000000280)=""/213, 0x0, 0x1, [], 0x0, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xe, 0x0, 0xdf8, 0x47, 0x0, r1}, 0x229) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x48}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 760.624256] binder: 19028:19097 BC_FREE_BUFFER u0000000020001000 no match [ 760.631326] binder: 19028:19097 got transaction to context manager from process owning it [ 760.639745] binder: 19028:19097 transaction failed 29201/-22, size 0-0 line 2843 03:38:32 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:32 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x40000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved=0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x0, 0x5, 0x88a, 0x1, 'syz1\x00', 0x4324}, 0x1, [0x10000, 0xffffffff7fffffff, 0x7, 0xd47b, 0x9, 0x6ff, 0x4, 0x4, 0x8, 0x8a8e, 0x5, 0x1f, 0x5, 0x602f, 0x64, 0x1ff, 0x4, 0x10001, 0x3ff, 0x7, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x401, 0x1, 0x8000, 0x1, 0x1000200, 0x4a, 0x7, 0x2, 0x100000000, 0x2, 0x4800000000000, 0x4, 0x7f, 0x3, 0x37, 0x7c000000000000, 0x7f, 0x7, 0x7, 0x3f, 0x7fff, 0x1ff, 0x5, 0x1, 0x68a, 0x7, 0x40, 0x499a, 0x1, 0x2, 0xfa92, 0x800, 0xbc3, 0x100, 0x4e, 0x7, 0xff7, 0x49, 0x84, 0x20, 0x4, 0x1, 0x4, 0x400, 0x9, 0x8f, 0x1, 0x7, 0x5, 0x2, 0x4, 0x2, 0x0, 0x20, 0x8b, 0x3, 0x7, 0x0, 0x7b3, 0x9, 0x7fffffff, 0xafa4000000000000, 0x4, 0x3, 0x3, 0x22d, 0x8, 0x4, 0x6, 0x8b12, 0x8, 0xa84b, 0x8b, 0x5, 0x82f4, 0x3, 0x0, 0x80, 0x3, 0xbb6a, 0x81, 0x7f, 0x6, 0xdee7, 0x9, 0x5, 0x5, 0x7, 0x7fffffff, 0x3, 0x7fff, 0x8000, 0x1ff, 0x2, 0x6, 0x8, 0x81, 0x3, 0xedf8, 0x2], {0x77359400}}) 03:38:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf}}}, 0xd8}, 0x1}, 0x0) 03:38:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = semget(0x3, 0x0, 0x20) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000001300)=""/131) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000014c0)="2ba75e2556057f82c8cd17f5b17d80047f233bbfd229499ea02a2f4728874ef22c10799b326f07f25e422ffb352e0893ff057309be87d99ca513d1990ff1a4762e6b973ceb59295ea114e868483e221a5032feb049b7886a59b2adbbd31a2153d613093c3b15b3cd6e225b7a740a8cb37b4baca5d225c8928e57ef27c7a1bf47", 0x80}], 0x1, &(0x7f0000000100)}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) recvmsg(r1, &(0x7f00000012c0)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001240)=""/87, 0x57}, 0x0) 03:38:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x200, 0x20c, 0x1ff, 0x8001, 0x7fffffff, 0x9, 0x63a, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x14ea, 0x9b4, 0x0, 0x3, 0x2, 0x1, 0x2, {r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x4, 0x5, 0x7f9, 0xb31, 0x7e6f13c7}}, &(0x7f0000000280)=0xb0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x8a2afae4ac64db7c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000)=0x1000000, 0x4) close(r5) close(r4) [ 760.758537] binder: undelivered TRANSACTION_ERROR: 29201 03:38:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 760.834011] binder: 19113:19114 ERROR: BC_REGISTER_LOOPER called without request 03:38:32 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x4}], 0x1, 0x0) close(r0) 03:38:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") shutdown(r0, 0x0) 03:38:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xaa, 0x0, &(0x7f0000000180)="9e5f5ba51cf79c61f27b195929b3b0ce2ba3bc3da30c3daf903d2efcf4a7b2c7d6c38ca3fd8e07f0ee7372adef7f0e5dddb89770eb4bc07bbc89e6ed763983891890eccfb923f412e6af7af87987e7fd4d76f88bcfe1f9e72c6bed3f0a265a09c4cd74ad65076f6f6cc8fee331558eeaddc94c2ebf5b4a930d0843b28663f377495731a925884eab4ea5e6c98a629c0563ad559525ddb5a919dbe9b95853c11f1343a6d9a524da9959c0"}) socket$inet(0x10, 0x3, 0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000380), 0x7b}, 0xfffffffffffffffe) 03:38:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1c00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="d13ef4edd12127b531"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:38:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff}) clone(0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:38:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x900000000000000}}}, 0xd8}, 0x1}, 0x0) [ 761.618732] binder: 19113:19164 BC_FREE_BUFFER u0000000020001000 no match [ 761.625800] binder: 19113:19164 got transaction to context manager from process owning it [ 761.634241] binder: 19113:19164 transaction failed 29201/-22, size 0-0 line 2843 03:38:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$KDDISABIO(r2, 0x4b37) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x4, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x28) close(r3) close(r1) 03:38:33 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x600, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080)="40954c331343fb6c578c4df1d9e08f79545a20856218e7d91f8f8257fb442a6bc64efa18a2865ca6d2a6dff6073f7276e8cf3d2bcbc534ce47733bfa00df51eab8896b0ac1bed8ac0ec744b689d52362657968ad21ef2c0c98c07b8dce1983c5daf4c05cb768c8eb7c351d1a3cfec9871325195816fc23bd1ee17b09da89c4a25d09acb7d0c1061754ca7bde275f97128d0eb68d51f8468b79284a5c0e2473861644772d9ecf35b67d952e6cfcd12a296794052b1286cb443f8a38d9067fef017eb159884d9b85054c983b5c5726047d3568187b31aac0c60f030a6e", &(0x7f0000000180)="5b47c67e95353d26af22925f353fa3b685f24526a5db22578dce5883b390080de9370e67", 0x1}, 0x20) ioctl$BLKPG(r0, 0x40140921, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 03:38:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="6e7a26261b7d2afd2bfdefd49333751b", 0x10) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:38:33 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xbe, "a49b0daf1b7242a1eace60d18d7ac35369d0b1ba53315eacb950ae24e31b462d7e4268aed8dde4aa2969ad4437502acf57ce589ee755a98d4d98910d6a45421194023745bd339cbd68dde58a7ecb7455f0a99f35f834d0766d862c1d4d20fda097cd6b4eedee34b2ea1adc47c2a1efed15bbe36cf92b91bd0d8cbc33a9f8347d60d629f0e3ccbd554c8ebbb6b6a51f7f61c6e346ba1151bc55d0917d3f4505ce6290283411357a4e64718141ed4ad4a96710e1ca9ef10d3f64abf63c2573"}, &(0x7f0000000040)=0xc6) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x80000001}, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x4, &(0x7f0000000080)=@assoc_value, 0x8) 03:38:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x15000000}}}, 0xd8}, 0x1}, 0x0) 03:38:33 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x10}], 0x1, 0x0) close(r0) [ 761.755899] binder: undelivered TRANSACTION_ERROR: 29201 03:38:33 executing program 5: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'ifb0\x00', 0xa201}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x2}, 0xe) 03:38:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) chroot(&(0x7f0000000080)='./file0\x00') openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) socketpair$inet6(0xa, 0x0, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffff9c, &(0x7f0000002dc0)=[{{&(0x7f0000000180)=@can={0x0, 0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/122, 0x7a}, {&(0x7f0000001340)=""/106, 0x6a}, {&(0x7f00000013c0)=""/241, 0xf1}], 0x5, 0x0, 0x0, 0x4}, 0x5}, {{&(0x7f0000001540)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000015c0)=""/128, 0x80}, {&(0x7f0000001640)=""/174, 0xae}, {&(0x7f0000001700)=""/150, 0x96}, {&(0x7f00000017c0)=""/223, 0xdf}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/188, 0xbc}, {&(0x7f0000002980)=""/109, 0x6d}], 0x7, 0x0, 0x0, 0x7}, 0xfffffffffffffc01}, {{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/166, 0xa6, 0x1}, 0x1000}, {{&(0x7f0000002b80)=@nfc_llcp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/226, 0xe2}], 0x1, &(0x7f0000002d40)=""/81, 0x51, 0xe00}, 0x6}], 0x4, 0x2000, &(0x7f0000002ec0)={0x0, 0x1c9c380}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002f00)={@mcast1={0xff, 0x1, [], 0x1}, 0x23, r2}) creat(&(0x7f0000000140)='./file0\x00', 0x20) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0x200}) 03:38:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf000000}}}, 0xd8}, 0x1}, 0x0) 03:38:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r3, 0x402, 0x70bd28, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x104}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xc00caee0) [ 761.838567] binder: 19182:19183 ERROR: BC_REGISTER_LOOPER called without request 03:38:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x300}}}, 0xd8}, 0x1}, 0x0) 03:38:33 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180)=0x100, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x64, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'macroman'}, 0x2c}, {@force='force', 0x2c}, {@barrier='barrier', 0x2c}, {@decompose='decompose', 0x2c}]}) [ 762.176442] hfsplus: unable to load nls mapping "macr" [ 762.181895] hfsplus: unable to parse mount options [ 762.612133] binder: 19182:19232 BC_FREE_BUFFER u0000000020001000 no match [ 762.619508] binder: 19182:19232 got transaction to context manager from process owning it [ 762.627944] binder: 19182:19232 transaction failed 29201/-22, size 0-0 line 2843 03:38:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:34 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43) recvfrom$unix(r1, &(0x7f00000001c0)=""/179, 0xb3, 0x20, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000000), 0xfffffeb3) 03:38:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) 03:38:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x9b30, 0x0, 0x3, 0x4, 0xfffffffffffffffc, 0xfffffffffffffe00, 0x1}, 0x1c) prctl$getreaper(0xb, &(0x7f0000006f00)) setfsuid(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x4089}], 0x38) getsockname(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 03:38:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4}}}, 0xd8}, 0x1}, 0x0) 03:38:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r3, 0x80000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x10d00, 0x0) renameat2(r4, &(0x7f0000000380)='./file0/file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x0) getpeername$unix(r5, &(0x7f0000000800), &(0x7f0000000880)=0x6e) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x42, 0x0) symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000600)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x12) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000540)={'broute\x00'}, &(0x7f00000005c0)=0x78) syz_mount_image$ocfs2(&(0x7f0000000900)='ocfs2\x00', &(0x7f0000000980)='./file0\x00', 0x9d, 0x1, &(0x7f0000000b00)=[{&(0x7f00000009c0)="566bbef78e3b861b2672e589a1288ea9eb7f7e32b16d5a2865821a33048b7d8e042e3f33f49123c7bbd9525e0042733b15d792e47c35426a972fb4432743a7a57e1790b8f124fadd0d60b34c1a0c296c2933aaff66196e595f08a56b47eee4e5035abfef72a33549e6606625817bad3b02a93b06302ad216876e140804f4a98a0a45b55d67db7c9e169eaa24fed415b5310552e0d7cec9ee4fe4bcb389f1b6c3a164b8a434ac6822e6637c421e6c8a424d", 0xb1, 0x7}], 0x100000, &(0x7f0000000e80)='/dev/vga_arbiter\x00') setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="1800010000000000000000000000000000003e526cf4dc1628274072f813faef2322743e99b080acfca3c88b691896ad266f"], &(0x7f0000000280)='/dev/rtc0\x00', 0xa, 0x2) mount(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)='nfsd\x00', 0x24, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000b80)=ANY=[@ANYRES16=r3], &(0x7f0000000940)=0x1) accept$unix(r6, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x2000, 0x0) getsockname$packet(r6, &(0x7f00000003c0), &(0x7f0000000440)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340), 0x7) umount2(&(0x7f0000000200)='./file0\x00', 0x2) connect$llc(r6, &(0x7f0000000400)={0x1a, 0x300, 0x6, 0x5, 0x7f, 0x1000008, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}}, 0xfffffffffffffdf8) openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x4000000000004200, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400, 0x0) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) symlinkat(&(0x7f0000000700)='./file0/file0\x00', r6, &(0x7f0000000300)='./file0/file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001340)='/dev/loop-control\x00', 0x5, 0x0) 03:38:34 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2}], 0x1, 0x0) close(r0) [ 762.746580] binder: undelivered TRANSACTION_ERROR: 29201 [ 762.813214] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 762.821579] binder: 19253:19255 ERROR: BC_REGISTER_LOOPER called without request 03:38:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xc000000}}}, 0xd8}, 0x1}, 0x0) 03:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c0100001e0000002abd7000fedbdf25e0000001000400000000000000000000000004d20a000000fe80000000000000000000000000001501000000000000000c001500590735000100000015000b00fbffffff0c001c00eb35097c608ad5828df4b599b558c87b412c961763afdc52062df77dd1aa7d18f7fd875d1d56eb2596588f6972f11a1efb6cb8521f285243b0471367aeaff77b4729abf9f411deaff1b9754708ddfbf28f08e3f7feafdc0b278dd6a5b6a6bc4a09ab9d48ecc4299c9737952b8e0d5ef771d6de045c5885c2f86584a2e78cb5dab548766e2232b95c115ff8affb8918b4b8ace84ca9d245350f88b752323284a581d48c1562d73e3110abb8a215319fd6a37de2615639c8ba8a67b0a4df9f66db46494a3650511217e91673d158ea84b2467be62248dc5676cf5a98b94b2945be90af3c6b2228ac8880009c9c89346143aeb0c14c52855ad6f9", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x4002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x32}, @in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, 0x8}, [@mark={0xc, 0x15}]}, 0x104}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80040, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2000000000000005) 03:38:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x40013, r0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x2) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x110, 0x70bd2b, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xe371}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x8001) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x151c00) read(r4, &(0x7f0000000300)=""/184, 0xb8) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x44031, r1, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x8) mmap(&(0x7f0000851000/0x4000)=nil, 0x4000, 0xfffffdfffffffffc, 0x8132, r4, 0x16) write(r4, &(0x7f00000000c0)="8d", 0x1) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x6, 0xffffffff, 0x9}) 03:38:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:34 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1800}}}, 0xd8}, 0x1}, 0x0) 03:38:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 763.258776] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 756082810144684242 /dev/loop1 [ 763.309412] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 763.603230] binder: 19253:19322 BC_FREE_BUFFER u0000000020001000 no match [ 763.610351] binder: 19253:19322 got transaction to context manager from process owning it [ 763.618777] binder: 19253:19322 transaction failed 29201/-22, size 0-0 line 2843 03:38:35 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="95"], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x34000) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2110, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307}, @clear_death={0x400c630f, 0x0, 0x2}, @exit_looper={0x630d}, @decrefs={0x40046307}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x20, 0x40, &(0x7f0000000000)=[@fda={0x66646185, 0x6, 0x0, 0x16}], &(0x7f0000000040)=[0x38, 0x28, 0x70, 0x20, 0x38, 0x38, 0x48, 0x20]}, 0x7}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, &(0x7f00000000c0), &(0x7f0000000140)=[0x58, 0x30, 0x38, 0x28, 0x28, 0x0]}, 0xf1}}, @free_buffer={0x40086303, r3}], 0xd1, 0x0, &(0x7f0000000440)="24aad827cf4c9fd0ba9e58bf4af483bc6101d591524ea203c943ef6b6ff937ec74ae9862f83710986d72c24440c19b8474555e4ca7e3ad630836ef47c0e256ec271ca67449907cba90f2a4c50320c5dbb427f0aae5eeb69bc36667d83f7149dd6b362d7f6e38f30913585f52714802e110b445765090a95a87bb4d90af5cfde87123dd588b963bff2602a20a5a84c8d6e5002e2b9a17991690e0a3ee1bc44ca993e9b98e31b4a7a6f882fb25d067fb940a4935761c75f6783113ff8fc393198ee0febaa4fda59ac597124ac3314d1ec7b4"}) 03:38:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00\x00\x00']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8100}}}, 0xd8}, 0x1}, 0x0) 03:38:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000040000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x12, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x3, 0x6, 0x9, 0xa, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x1e}, @generic={0x2, 0x5069, 0x7}, @exit={0x95}, @exit={0x95}, @jmp={0x5, 0x3, 0x4, 0x3, 0x5, 0xfffffffe, 0x1}, @alu={0x4, 0x401, 0x6, 0x2, 0x3, 0xfffffff8, 0x10}, @ldst={0x3, 0x1, 0x1, 0xf, 0x7, 0x2, 0x4}, @jmp={0x5, 0x4, 0x0, 0xa, 0x3, 0x0, 0x10}], &(0x7f0000000100)='GPL\x00', 0x7, 0x73, &(0x7f0000000380)=""/115, 0x41000, 0x0, [], 0x0, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x10, 0x1d, &(0x7f00000000c0)="d41b15a5505c646953cb66440aaa008a", &(0x7f0000000180)=""/29}, 0x28) 03:38:35 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:35 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x3}], 0x1, 0x0) close(r0) [ 763.736447] binder: undelivered TRANSACTION_ERROR: 29201 03:38:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x5}}}, 0xd8}, 0x1}, 0x0) 03:38:35 executing program 3: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) connect$vsock_dgram(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) setrlimit(0x10000000001, &(0x7f0000011000)={0x0, 0x5}) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x5, 0x4000009) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)={0x20}) [ 763.860709] binder: 19345:19347 ERROR: BC_REGISTER_LOOPER called without request 03:38:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x102, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x2000000000000, 0x5, 0x1, 0x1000}, 0x10) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0x4, 0x0) 03:38:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:35 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1b}}}, 0xd8}, 0x1}, 0x0) 03:38:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@ipx={0x4, 0x3, 0x1cd, "5972607128f1", 0x1}, {&(0x7f0000000140)=""/104, 0x68}, &(0x7f00000000c0), 0x14}, 0xa0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x10000) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x9, 0x6, 0x200, 0xc6, 0x4, 0x7, 0xffffffff00000001, 0x2, 0x8001, 0x9}) fstatfs(r2, &(0x7f0000000280)=""/117) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f000016b000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(r3) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0x1d, 0x1000, 0x0, 0x0, 0x4, 0x7, 0x6, 0x4, 0x1, 0xff, 0x4, 0x7fff}) [ 764.640796] binder: 19345:19397 BC_FREE_BUFFER u0000000020001000 no match [ 764.647835] binder: 19345:19397 got transaction to context manager from process owning it [ 764.656217] binder: 19345:19397 transaction failed 29201/-22, size 0-0 line 2843 03:38:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)}]) 03:38:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000010000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000090780000"], &(0x7f00000002c0)) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0)="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", 0x108) 03:38:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="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", 0xffffffffffffff65) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200400, 0x0) r2 = dup3(r0, r0, 0x80000) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1400) 03:38:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x9}}}, 0xd8}, 0x1}, 0x0) 03:38:36 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:36 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1a9001}], 0x1, 0x0) close(r0) [ 764.774460] binder: undelivered TRANSACTION_ERROR: 29201 03:38:36 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000b08f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f00000000c0), &(0x7f0000000380), &(0x7f0000000240)="2251e4dbc57054d9c933c2691e529bbdb8b808f49ff485826d7cd133231446431f41db1b23b61324a2ac537938223a04df2ec31549c1003b55ce40d22826be54009c6901db79b5c370dc23a294440dc1d6ed64eb81987a6da52bd1fdd9f85aefea269fa586605c27983ff0e67c883c8ff24b2f79bd6ad3c8e4a79c8264b2903c5e17b1f51242b90d268da4d9911deb3d8b6fbef53a29d07baa021358d0e7a32a94d588b7a3fd2c28f2c098de51db905553f29f16465bf38cad4811148547c3b4b212c0f6af10b5209d4ad067d0f0feb95c34b0d9864345aebb59ef868e3db34bbb1eb86fc6") r2 = accept$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockname(r2, &(0x7f00000003c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) accept4$llc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x10, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0)={0x4, 0x31, 0x7, 0xfff, 0x3124f228}, 0x14) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000004c0)=0x9, &(0x7f0000000500)=0x4) 03:38:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = gettid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pkey_mprotect(&(0x7f000054b000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/146, 0x92}], 0x5, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/33, 0x21}], 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 03:38:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000100)=""/237, &(0x7f0000000040)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) [ 764.857645] binder: 19420:19421 ERROR: BC_REGISTER_LOOPER called without request 03:38:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb4}}}, 0xd8}, 0x1}, 0x0) 03:38:36 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1002, 0x8000000000031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0xfffffffffefffffe) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 03:38:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 765.649191] binder: 19420:19469 BC_FREE_BUFFER u0000000020001000 no match [ 765.656219] binder: 19420:19469 got transaction to context manager from process owning it [ 765.664605] binder: 19420:19469 transaction failed 29201/-22, size 0-0 line 2843 03:38:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x16000000}}}, 0xd8}, 0x1}, 0x0) 03:38:37 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000880)=[{&(0x7f0000000180)="1ef472edb98378d6d5a8a8170d163b1236e6eb4ab4", 0x15, 0x62ba}, {&(0x7f00000001c0)="85dc7c7eb9a09e95f41528f2da66cb197da48a3a44c4ee8544231eb0e18d5541f295846350f74151db5fe11439d4bca1bcbc232a58b90ddd38324538b8f2e43d4b0d9e7baf864460d5762ce1ea0f2cd33971cffd2931e7a94fda665945eebd3e8d63df80f04689f94205cf608fd38659d6879138caec4cc0678211e72aa7823a5c80ff83589653367bdb1a46794f23f366f88423fd89bf54a2d6bb3a02c6092d23c3cf808fa0c59e4f31f4bd7ef8721115123c3a394f94ca941d647f797977b4daca342e3e7bbd6e", 0xc8}, {&(0x7f00000002c0)="4b935e466906512192be28f0bf5d3abe344e3644f8cb4f9664b9ccde233dc6a8b256e302ae49daca826f20f0f8ea49553f060755b073ada86803095842dffc85f8c11ecfb028ec2ed11301ff78bf31e66141be1cb60327dc1c25c5dc23e756e90b33fce81867b9e83ac29622a897511ad81f9dae8d7405809bd5e40fb3e5976f2dbdc62df5b33bd9fbf82ebe3a02eda260b31578f32b4ee0a584c8d221f39ae00b8c788beb914f26382f152f1d739e322e916de2eed889a6cb9bbb3d26b1211017a1cf9a2f4e34430754621618ec4e0845b6fc", 0xd3, 0x8}, {&(0x7f00000003c0)="0b4620766d264ff442f1f390438a902271920876189632014bc5668b85ba884f9d1c3890cf2d090a2d4587bb57cfe0b83a0951ce0e8cd436a10e9113dcf07e4e54e231b0b569be56189d9a2e91077d542136967d91dda077252bb6192d5782748080b58f7b66aa1c91a627695d65302aeaae7bb294cffcdddca67afecc529011cf51001aa57fa126849e326fe43b4ebc2526928757716b0800a5eaa29bdf8fbee36aae30bfd36350be0ae86315f6627a461a6a32bdae1d4ca93c7fcd944830ef23ea0824061b6b46eaee593ce1b09203c435a95f76348c7590f0c9832d", 0xdd, 0x9}, {&(0x7f0000000580)="04da145bee51bbc69bfcb5c2d910d4742f0aef6c1eb61d7f2073af09b933354c2545c0877914b3256915552d8044658c0e33acb4b2d4c3e23a193dcc95f2d121dbfc726cba92849052d745220b60", 0x4e, 0x20}, {&(0x7f00000004c0)="b09d1e0e8e4bbcd380", 0x9, 0x3}, {&(0x7f0000000600)="bbc40b1ad3309255098fe5f7b9e38d8225992c3af42f56ae48deb48ef0a3f2b3b35f6506adf8eca0d9fff92f0630417450c0e4a227cb8878edd70fb5e1681b8f3c2310804feee44e3ac0115d5463b3ef5dc896fdbe7aa008890349cf4d0024c2eb0353347c6662ffded363987914126a5814bb5b10bd5e65849f5d4a2f43a6de6a79eda8b9c21a43f12263c855ed7dac0507a45d63becdb8c9a05891b55f40bf717808303c161dec1c3cede556f4ec7a8b00493aa17c5198be1f875ac77a1c2ae4e413325c4dab02e8f2704f13", 0xcd, 0x96b}, {&(0x7f0000000700)="fbb14816867fa913b7402b60ae73894075fcaa21ef947a2ea0fd27747368dc7e10bdc79eabf80123222c59a4dfec5252969f1fe9996eeff947a9c9f2f2b8f8790d9e9c2a06531e08d7cf73192970c58451c8415055cd2423a43e791aeaeac1364789bc1190c95c0f3a6ebad77b3c720884c2823ea61d41b59ebc9ecd37ec71ce3c39316c70c6c713bacc8cf7f727053ccec13e1f81dbadee774aeea11c818bffdae37f9462deff2330a310807e18c141e84914ff51f1192b218385e577b9fb4ad4ea95f13d0947f713014a37768998b27bf2df5b27b002216741655c1aa410ccd40157ca6dacb9ba45ab8573635e3103f797b3295145", 0xf6, 0x9}, {&(0x7f0000000800)="b2a77b8c3ccfedf116766b7e2e0b29e9c988024af9bfe7f275fdb435884831f4e3dc56b3c68f41f926caa9d51df1b9ee0f6f1e9e5821923bcdb6e86e41d849d8c5539c5b0ccad56c0fde2f77735b5cef5b080e25fa5103283839ffd2bbab92555343ad91", 0x64, 0x7}], 0x34000, &(0x7f0000000980)={[{@nodatasum='nodatasum', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, 0xe8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x3f, 0x2, 0x2, 0x5, 0x0, [@loopback={0x0, 0x1}]}, 0x18) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) 03:38:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1, 0x7fffffff, 0x2, r0, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x3f, 0xfffffffffffffc01, 0x2a8, 0x10, r1, 0x5}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r2, 0x0, [0x305f, 0xa]}, 0x2c) 03:38:37 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x152}], 0x1, 0x0) close(r0) 03:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x6, &(0x7f0000000080)=""/134, &(0x7f0000000040)=0x1f) [ 765.786825] binder: undelivered TRANSACTION_ERROR: 29201 03:38:37 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) dup(r1) r2 = socket(0xa, 0x1, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) dup2(r2, r0) 03:38:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x10000000}}}, 0xd8}, 0x1}, 0x0) 03:38:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:37 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e0713", 0x58, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:37 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000004c0)=0x7, 0x4) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @rand_addr}, &(0x7f0000000380)=0xc) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10) sendmsg(r1, &(0x7f0000000200)={0x0, 0xf00, &(0x7f0000000140)}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=""/251, &(0x7f0000000000)=0xfb) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[{0x3, 0x7f}, {0x4, 0x80000001}, {0x8, 0x880}, {0x3, 0x1f}, {0x7, 0x1000}, {0x4, 0x9}, {0x8, 0x9}, {0x3, 0xfff}, {0x2, 0x2}], 0x9) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000440)=0x8, 0x4) gettid() close(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000500)) timer_settime(r4, 0x0, &(0x7f0000001080)={{}, {0x0, 0x989680}}, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e21, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in6={0xa, 0x4e20, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e22, @rand_addr=0x100000000}], 0x58) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) syz_open_dev$urandom(&(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x1) getsockopt$inet6_int(r2, 0x29, 0xb5dacaf6a97812fd, &(0x7f00000001c0), &(0x7f0000000240)=0x4) [ 765.886786] binder: 19491:19493 ERROR: BC_REGISTER_LOOPER called without request 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x14) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x8, 0x4e20, 0x6b25, 0xa, 0x80, 0x80, 0x16, r1, r2}, {0x5, 0xc3, 0x3ff, 0x80, 0x7f, 0xffffffffffff50c4, 0xb0, 0x401}, {0x8, 0xe6, 0x8, 0x1}, 0x7, 0x6e6bb7, 0x0, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xa}, 0x4d5, 0x6c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3500, 0x3, 0x0, 0x100000000, 0x1, 0x200, 0xdb0}}, 0xe8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-generic,rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x20) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x692, 0x75b, 0x3, 0x7}, 0x10) 03:38:37 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f00000000c0)) 03:38:37 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000b0004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) [ 766.124517] netlink: 'syz-executor5': attribute type 11 has an invalid length. [ 766.667528] binder: 19491:19539 BC_FREE_BUFFER u0000000020001000 no match [ 766.674630] binder: 19491:19539 got transaction to context manager from process owning it [ 766.683087] binder: 19491:19539 transaction failed 29201/-22, size 0-0 line 2843 03:38:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40080, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = shmget(0x1, 0x4000, 0x440, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000002c0)=""/212) ioctl(r3, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 03:38:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x17000000}}}, 0xd8}, 0x1}, 0x0) 03:38:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:38 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f00000000c0)) 03:38:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x40, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x2}, 0x2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) 03:38:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) [ 766.801337] binder: undelivered TRANSACTION_ERROR: 29201 03:38:38 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f00000000c0)) 03:38:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1a00}}}, 0xd8}, 0x1}, 0x0) 03:38:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 766.868470] binder: 19542:19558 ERROR: BC_REGISTER_LOOPER called without request 03:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3f}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000fe0a000000000000000000000000000000000000000000000100000000", @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x48) fchmod(r0, 0x28) ioctl(r0, 0x4, &(0x7f00000004c0)="7655636c6c6c9de4a39b3c06ac6ac90b18badd5b9dc73ca15639d75c0f824157971dc5e7f181b90505b736118a34fce895ed2aee4b001c7a59814645553d9d6361fecb503b7b2431f2cc45e2d9cc26afb80769dbd452039af61a4077a22abb9aa1d29f26b3e7") r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x10080) dup(r0) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="7632ed8bb34f4a500691674a0dc295534acbad043f26707c171978a943f2ef4a41c7ef7bafcde0b429350ade02218f8dd1aaf088f38685537e541e12bc27ae1615d05354da48742ad356faf431c44233a6bafceea6548960938ea548cb594b1fac0344", 0x63}, {&(0x7f0000000200)="01a1e89a8aef44daf1c09382c75a0e62e040143dd2a637feecf7294bbe11f2d2e8c95f340c3aebf80da4dfe8eab123631be22b949a4c7bad8b75d8d28427edfacc667032a546fd222e7966325971495de8ca8b80009695a6115a3e47bfa2b540c3da06b756b8ea67fa85a6fb4009b191a898c9ff05b805f15add53278fbf8fbfdf7c09296cd42f1c536ab4cb252366828080680dfd8c7ab066", 0x99}, {&(0x7f00000002c0)="2c3afb1f12e809864909884895dd2dc6cac1dc8f1c1e244b7725e667451bc182d9430c48b29eea7e88f7ac5e73c8e8190897d6b6e4e203e30bb5b9ac4bcf38f6423fe9e5e59738eb8e07d4b8b09a551d4eef71e2a77b3e50", 0x58}, {&(0x7f0000000340)="18ec22b41f0f274ec473859d285d2a8178a8b1875d5fc46c94587c87b00981c1d2a0f161278c01870afbea1c3f215e219cabd037331dc0e752f9ff2c8e89bf63c9d143b5f380597269305327fdbcc3413fd474665a48fe5744799b9f639240b6fd29cf545e8b85106a3709a4782eeb0011371f63beeb9ff4af29915c8232423624", 0x81}], 0x4, &(0x7f0000000440), 0x0, 0x20000890}, 0x4000) 03:38:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040), 0xac, 0x0) 03:38:38 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:38 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:38 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x10000, 0x400) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x9a, "3a56601084dc87904a688a0b2dbf85074b4262dd7b3c87fe1c30fbd71b90e7e153e01fcd1849b8b50092370f23168d09a9b0e682125bbbb63e7c211d67929f2ffedbf620250da600f00fc10f1f6f1838e0085fd360255642dd3022b32723121f2d117ab5884e4c2413a301063bc1064bd0457eb40d3ee2133f255a5159ec1c51a3751efd467c6c9b41bfb15b24e86ce26c1a2d861b1e5f624431"}, &(0x7f0000000180)=0xa2) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x0, 0x20, 0x5}, &(0x7f0000000200)=0x10) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) 03:38:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xc00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:38 executing program 5: personality(0x35375d2df5f70313) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40100000000001, 0x81031, 0xffffffffffffffff, 0x2000000) 03:38:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0229007fe6fe000000000000ffffffff05001a000000000000000000fdffffff00000000ff0100000000000000000000000000010000041402c21000000004d3000004d500000000"], 0x14}, 0x1}, 0x0) 03:38:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x40000000}}}, 0xd8}, 0x1}, 0x0) [ 767.633888] binder: 19542:19621 BC_FREE_BUFFER u0000000020001000 no match [ 767.643120] binder: 19542:19621 got transaction to context manager from process owning it [ 767.651593] binder: 19542:19621 transaction failed 29201/-22, size 0-0 line 2843 03:38:39 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295eca3134b1f477671070") r1 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xa4, "fa7731371fd7f595b95bffc54a35e4f4289c9c385ff6e4a881c4c8e4f8a77baeb49510e8ffcae6adad3ab212c2113c938b1f4973e09bde652b4509c0efd0ed39421ce9685edb09ea576b17d79c3e084757344df1fbaae5afa1e47b1a084d65d25b13f8a1680b494722c969412fe3357579b716902482fa73c4b897f9da5af20885af982f9849845a007c372525da216afaada640806e0f108f712449647f4811a0ff4625"}, &(0x7f0000000200)=0xac) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x3, 0x6a, 0x2, 0x10}, 0x98) socketpair$inet6(0xa, 0x0, 0x3, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc) ioctl(r3, 0x5, &(0x7f0000000300)="e3d833cfee626c4c3b392d054ad0f39435f9c9af3ade9245f0d5924c2afd4e967e7424be5adb5cd1b2ba655836a148a3ccb8b670d1dd6051d3c3f420819224667d373c514e17ffa15403e89846f2f4edd8b38327d674c6a6a2b01e5633b61e70e43a0264dcc7edb1553d7eacdd652a46fd5a24c13ba205849460c4926e283a52db785c5c795a14e1940bf6118795a021") 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:39 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x81000000}}}, 0xd8}, 0x1}, 0x0) 03:38:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x10001, 0x683}, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000001c0)={0x9, 0x6, 0x1, 0x1ff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0xd818, 0x7, 0x3}, &(0x7f0000000180)=0x10) r4 = socket(0xa, 0x1, 0x0) dup2(r4, r1) 03:38:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:39 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x57}], 0x1, 0x0) close(r0) [ 767.769568] binder: undelivered TRANSACTION_ERROR: 29201 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 767.850516] binder: 19641:19642 ERROR: BC_REGISTER_LOOPER called without request 03:38:39 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1300}}}, 0xd8}, 0x1}, 0x0) 03:38:39 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180601000000000000000000000000009506000000000000"], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) 03:38:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1c3, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x0, r2, 0x1}) syncfs(r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="2664460f20c70f20d835080000000f22d8660f3880233664470f013b660f3a214dff0bb9800000c00f3235010000000f30f20f1014d5322e5d8d3e0f22d066baf80cb850eaac8eef66bafc0cb887fed4faef660f3881a7a9000000", 0x5b}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:39 executing program 5: listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000002c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', r1}) 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x500000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:39 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00", 0x2c, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x100000001, 0x6, 0x0, 0x0, 0xffffffff, 0x3}) ioctl$TIOCCONS(r0, 0x541d) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x20002011}) r4 = gettid() fcntl$setown(r1, 0x8, r4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x20000000}) 03:38:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1800000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 768.634971] binder: 19641:19711 BC_FREE_BUFFER u0000000020001000 no match [ 768.642091] binder: 19641:19711 got transaction to context manager from process owning it [ 768.650581] binder: 19641:19711 transaction failed 29201/-22, size 0-0 line 2843 03:38:40 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0d0000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:40 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00", 0x2c, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) accept4$inet(r0, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000180), 0xffffff83, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0x78, 0x4) recvfrom(r0, &(0x7f0000000180)=""/101, 0x23, 0x0, 0x0, 0x50f) [ 768.768522] binder: undelivered TRANSACTION_ERROR: 29201 [ 768.813621] binder: 19719:19720 ERROR: BC_REGISTER_LOOPER called without request 03:38:40 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x19000000}}}, 0xd8}, 0x1}, 0x0) 03:38:40 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00", 0x2c, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:40 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x480001, 0x0) sendto$unix(r0, &(0x7f0000000200)="275b6d15d502ad4caac347bcc5b1ae794603ec2f731e886e579dbb037887e276b45f5e29102be24f7a418ba67815f57628f259df0fb1af2ab8117fb6ade8cb6fe044cce461d82c045dee5bfdb3b96f6419605d685436d5f9845f69c2cc175d380820eaf656aec568ef7fc03eb697df771b6c11f8e6d42e55aae015b586368d5c595035a3d2a11539097f420e92a5b33f6c0cdc0b5375d6da1845f684c2f928c81dc4bc7685e6ddbf0453698bd0244c9061b163b1841437578abfc4660b47acf1221c7cb70b225f5dce1a7cb9ddc92bd5c9086d3bc7f4fbe09ef79961c3a30050609162da9b7698eb1db2aa98571231206e59cb0a34c10ba87ad86f8ebca8cfdd571c4e20fb9549e02ff6ca7b24a6892f3418909dfa4803bbd1f0fae32f96d90ff3ab01d3b43cff708c641f2f59bc535079746f50e801245487aa71db8ea0895acf39f285fd96c17bf1d6ca5ab3feca039f409345ad65fab17b360d705fcdb5f5598538bdd3f05ee591bd22ddb27f58997efbf9551005606e86d8d2d0136447dd97fa927695bd570d678582654bccb266c90bb5a61e6c5e598e8d3c3b1d952a4d8e64068a71319de018240b90762b50196023cf13052f5f3260a71cf44dd4c980ada454dd5f1115a78d10de42b79d813a5dafca7e75952044d6dcbd9096136ba8206d9dde711a07e955a2e9de2fd83743c93d67ab08631eb28b5c11f487b7b0931e313630540fd76d31858a1db37b63bd2fa32cbb58f52ebe30fdb9051d7bcb53579da22e26792bab455017a018375be374dc2e29aab8b27f3442fbadf4599b29d376ee8f6dd2abc654ec438bec1e12eee7811b5b27d6e1e16cb90a564270bef25e0c5669475ab1a474c3f3d2210e46fcf845b4abdc5c5eb5834dc19b6595f50df8dc250981f355dab0127e4be509da70cff0daa22745e70f1fe73c2f4e163b92ab96ef177e4b70bc48e98aeff48df944adeccc5ac1462a224082e6d7a8d463583a4b1925c2cb974fb220e5d38b2d4be4ecbe9c3bb18e66bf87a2c6647845fada8b92529d208acf29c419ea50364953d7b4fc79f05447f51f2e4b27acd857a1540886b3ed91e6222205f5e7e119d347124482e3ba448b66612df5ec9664606d85daab5a38deb852fcd8acb797cf4950955cc4d96a23225ac9a2deb1db441888bc74d7b6ca9f43a4cf31dfda53c0257909829e802351787b269ec47aff33bcfb690b36a116f070b711d836342ffdcc9ff30aefaa50b24b1583956fa72269fb1d3aa8f91969e7dccdea19a27c1a58b8e56f81672d0d0ba648dd8421ed0dec6e63a9a9c276d838e9c1d9e5e941ef2e191adad33edb9c7c79fcecf25659e9bdaa8252c9e6a9a04b1f2cbce0635f9956006de15433a02a2b223a1e2784f1f937d30be3df7f3432f8099bcd45090711312babc4e54039710a7ee45db6005408e56097e23cbb87ea22f1280e443adc9ed728710278d79ab91cf01883ca22e935b6e254f5b6995f43cb5932f4720b38a334e69bca34a52acfcdfefc29d8963c4dab3af17103f9a34a842a0baf6c8cbde1b47c5c52f9dc82bf2ebdf5302b42d3620a71b8973bb8ced43228e6acab28e22e7b967a2a0d37f2fa0c1f2fe70e913c52aac91ff791ad1ed0caddf65bd4ac10bf5ac4de9117d723c422995b012d15507073f3e1b9e570f79ae0b66c9dc9c7adda2bff5d4a2bc41d9eaf1acb2d92f040845fed0b78e729a823f72e1e71afe6297bf704a77b987e9186fca9d4b009a1fec52f4c0d66be793c211e80fdea30a6d0d7021243dbd4ba215c77df18bbb5813956286dbe575ad558b8bc7a3a2d4741f04996dfa445ce091648314d1468902b1184723b81ab4e92fd5c85b43fcaa4aff6756301c740b452d411d13219ba963870b1e82ec0265d87424a5a9d27c142c3e77296fe11a66e7ceaf7927a4a3afb9438953855d064d8acc914a551e0fa251224ec365183fd1a1f73135f998a13a297bf468ee81c54d56870d0b35e1b0894c5290b9bfb5e7bbb6a1741f324a7993a868855d8e2815368cea2c207c6688de108681096ecfd6457659348135bdc0a6143c7e19727696881cddb0e0f672ba364c71f3d50ffe1166891795a6e0db1b3e057089276153f4f75b1e87963ca93ee5286bb567d14bb8fceeb8748c7675d810c1eb3bc4665bced9d4a935a4638b8fea4f771676f424891963572d432b8672d83a12badf319316e2b78a961675d0af4cbf0c46885e01dd5deeebd287fbfd2674f96a92d486ee4a6bfe885cc1a6d005fc39d4aa1dc94f2a66796f84cc93efbdec197cccdd32ee14e61f5660de9ba888f74d83210bdaa58493c7266e604bed4aa1d0f48dacf8a4739967a623f6d928dfc1eda3af32d2ab351f900383ecfb088f49fd112d4458d6c61755fb49c6cfed31425f7673cd134347a30eb8ed080fcf794cfb46a72824f84381c2639c571f907883343714277125176a073c8e72d3f4f3a35a119ca076ff672c38662433765688660f016625754a6562698750a13becbc003a3f72f4a5fcea0ffc58567fe33042649b9f9dfbca3b0e8b2bbe9427512664beee47bd0557abb2fbb3e586902502a1713ac1c23b29a94caedbdfea60b3b0e1395cab5f3b59247db4f1b10dca97ca9030d1f6dab408c49b961e145fdac3328b5e0fdf3720e9aeb4d7bbf4fb4c7036b421fb2e062ac7873af57783d985bfd2219ba865da44c3e55a6db3acfeb9a4489795a1384abdc96cafb8c6b8b3471874c23348f8b2321ee5110d83c4a92dbf771cbb78644a9d35733dadd5f564616b639cfa85d8ca092a2990d27f9ff332161f71da7f3a1a0c4054c9f579039995efb0daa1ff28a002a946727df10447b464947e3005facb5c566ebb2dcdac75568dffea30ce846ef45d8a80f25c85a7dd07c4bacc86cb48d1b47c32506920e99c2db3e666a109a9106250c31b68dc9f9aaa1b5ca120e22cccf369023c13598c776b4040b6e1c3e9238f1ea097cd53661709e2a609951213308712215c6d663d84307feb622c1dcb310fd79e704f53c8c356431ccac516562b4562c8283ed93816d2e31efe34b5fd47cdee69f2700daa5f665f2ee0a7eefe2856914349599624faa6dacd80f0341cd19c03d8ae41138a6a171e610c17f3067b71494b8a7d08813d1d6d63362835317d8b4a595cf446d3f009f46aea7da6e4a4aeaebd6808de004f2f60c152cefce712a0b3ee319bacfa72cecf72c845ae5b72bdee56027174e142bcf3de6b41333f24231c76011907633543cf3239a732417247952d8fbb399da79c8101b6133de36dca080e04b3f577f93ca6371aadc5212a3589cada57e75f738f9dceb6b2cd8293bc6a953a92379d02cdf3a64fc857f95e7de4711a2f2df49203c5f2d0390806b92d61121db4c3e620c482e476f1ca19957c0e52ba2ed37b29e9caf20b12822badd6f85e8c0dc5796d19746459b006e126e10a8d45c26a7e5e0047988b8bf72a475cc456350a5750ccc5471b9f87caf8259637a9f6b290ee4d9ca27c60db5f13e02a2611078f68450173c19f6e542e6ff8f4b64fd0d0dddc83d23b90034047fba88a090c7104f797a497c6f6728b19baa07f407ca4ea4ee412e780f2cbb0f7e07a67ceebe9d72a92a0b9d9af56df9bc074a750ba5c067d78dea8e0b9c812713b6b9bd8679d2fae7ba3c71e5b70f03d3a33b293fd77085d9b67ba074836334dc7da70a807bbde9fabc417fdddc4a18e29d8f2778852e7179e1b02b82464d4274c46d90ee6ddafc6fb0c66ce92899b71e9cb355fc18b3e9e6013d4aaf98570aada8be64f29bb96ce6e2535367c22ed3f4f2f16e93461e59a3cd4ad6a2b462da92a603591a24a9928817840a6412d9d9f27b1597e10b3ab37db914ca0a937bd530bf7fd34a7e94a8b544490a97d3187318a5952f25e4fe0c77f27f492cfc41451662dd76ea8bfde8b2d32e2f12c37f24e704249dd42560739f23e8f5557e6b6a7eb46b457febdc874b90b31489d1abeb77351c3b34968e26867b00e1d0fc79c11094bcf00bdbea2da7d82c303cb376f0715da1a4940607b2ffd9b0488612a7dd74fdaf790c5892402c05a272ccf9de49ec075b8d6ba8920cfd268b7f6691ef7e0b24cf57878916a4a4cd1da34f1dba7259983ec068e92073d7e979d6874b5b78edfb3c333548580b6979cba0bb5975a91d50005a11971a2f641edb2f3ed2ee07fc2fb89ac13c6a972ad0ad853b9e39e1707a854b6abc1689dca854e43868a35a45855127b8bc587816890242117ab01d6e887f65ffec6bcc5a53e0f92a48fb3b2df5151b18e5c055a24989c58ec7fcaf578573864a47b2a5ce93d7a7b7cb82f1c95cd0690124cbd67f6b785aaf4efb1aecd818e5e4eb14ea6b245bdadb97869d2a7ad87e4bad8c13769eb719d7b53e5fc1a0e020ed19e8c7f6e5fce53071b8f6aafafd326ca456802d48551fafafc342877cf2b6445bfd80815a7eb29f88085c5092844a4b081b3c3609c32574d48bac85559adbfc47f1ee318f5c2940d044cd291256c43a3be4072d135a5e8e974e2e1c29247c0ba5cd31c2e41a40241f8e5127c55b81d5cf8115eca59eb80c89ebd0a58b573020f0ade379dafc2fcb88e0ada6de0a73b844b9863aa2153d0cd220c2f6f8da4d3f6ca63e7953d4b1db69855dc52dec7101b95952aeaea747bb591bef2d1f63a862363f6423ed1f2c79f0a28f555bde8dabf4d93abd529e3cba91a5756cdef3b2753bd8488f933683ee2a232bd96bab62637993ca2eb42ef2aef30a9e42c0a9fd624ab90406f5e7e31618fb55c19e16cbaceb019b9b25140ea8af959fface97d258cc17f6a4163eaa9e1a1942f7f2c171a120e24811356f07834b747f916dceb8e0da2fa1b737eb9422ed959c414246a5b6e77598c65ebf98dcb7c0b62bcab7eacb41ede3e0de5ce1703674c22ccba231d49de6fa366557e63902697b598352c62a67db7e3b7724054afc07f7f574e2deb9369452b1967e4b4d85fb3a46e49e725dd8b7916fb3799d88674b0dbd332b0f95977810b845f48f0b5012a3aec687fd091be8bd7189dee61aaa60181fe5b925e5cccd6935d0725bcbb2d21209daa6484ac27eb6e31136d6a55eeceafbbe06ac6fcdb4eed292d648fe9e4892b359d0ab4fcf45ee1e0fad593baa2e389458dbc1e323a05b4e90ba76ab13c852da342561125e90d02e72ccccda2ba15efccb3799f623a397621c70edf89935051a10d8a65cb60a4d6d6c104a9e0ae89ff96aeb19666ceea63f6f51c24a614d563c226233bf9faf6c7dc243f00994ad6bb029fd238e22c21b2c36fe0c903479fc3e1f81e78cd21d6855b418f76f425eba0eddcd9ecf45a31288ff9d99d9d5a88d4d904fdf26ab24c5e10dbfbe1c9153244c9ca9d9ad41dfe5a5ca120834d6966736e2af37b563c93af5d28618af9aa23a6809475dcc8a30d4621042ea6f067b05a47616d91593b0474331003ee3ac6078f0134d5e8d0448b858f84f43a9c520e2e3d50c4619160c2e41a643b1b183fb0dc0a0cbd264a822f39cc65769b2569a5b57f8013df82288c4496ebc34664da31dadb9c2d055ec994d22ccaf875e7fa10d3def7dacd4cf6c322b989f5e181cc50e71c6723b1ff08139029c5ebe3da9a82b5fa3674e641f71f49b265368db45b60ef553ed0f1fc03a4a9192d1eca09f34a73a48fb55f0a61866316ae19c27a97670ef009022076f1b2f9dc4bc9b42e3c2f027dc96ad79ffe65b497394bf876f71eacf933606c79c43eb24a1a59c75dd487eef0486741a9b24c0c301ab833ea899c332d91384d49b", 0x1000, 0x800, 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000080), &(0x7f00000001c0)) 03:38:40 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x8}], 0x1, 0x0) close(r0) 03:38:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:40 executing program 5: pipe(&(0x7f0000a01ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r1, r0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000000)=""/169) close(r5) writev(r4, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r3, r1, 0x5, 0x0) 03:38:40 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x7000000}}}, 0xd8}, 0x1}, 0x0) 03:38:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:40 executing program 5: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x8000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ptrace$peek(0x2, r0, &(0x7f0000000080)) 03:38:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x3000000}}}, 0xd8}, 0x1}, 0x0) [ 769.606127] binder: 19719:19781 BC_FREE_BUFFER u0000000020001000 no match [ 769.613210] binder: 19719:19781 got transaction to context manager from process owning it [ 769.621580] binder: 19719:19781 transaction failed 29201/-22, size 0-0 line 2843 03:38:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:41 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1b00}}}, 0xd8}, 0x1}, 0x0) [ 769.739944] binder: undelivered TRANSACTION_ERROR: 29201 [ 769.792863] binder: 19791:19795 ERROR: BC_REGISTER_LOOPER called without request 03:38:41 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:41 executing program 5: r0 = socket(0xa, 0x1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r2, {0xf}}}, 0x24}, 0x1}, 0x0) 03:38:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f000000a6c0)={@empty, @empty, 0x0}, &(0x7f000000a700)=0xc) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x20, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x40, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote={0xfe, 0x80, [], 0xbb}}]}, 0x2c}, 0x1}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x400841) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000140)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'irlan0\x00'}, 0x18) 03:38:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x15}}}, 0xd8}, 0x1}, 0x0) 03:38:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:41 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:41 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x7ffff000}], 0x1, 0x0) close(r0) 03:38:41 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f", 0x4d, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xffffff7f00000000}}}, 0xd8}, 0x1}, 0x0) 03:38:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="b77cab30ac97a1b2d7919d7cba82f6a2ac510c083e5c55710f1ef89592c6f035f5af8db4e54537090cdc4116ff745321c561d87565e8a181487c1317989f0986a25ab28eef443df722ae745a914243f222", 0x1d, 0x0, &(0x7f0000000340)=@rc={0x1f}, 0x80) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)=""/121, 0x79}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 03:38:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x40000000042c00) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240), 0x8) [ 770.573615] binder: 19791:19859 BC_FREE_BUFFER u0000000020001000 no match [ 770.580665] binder: 19791:19859 got transaction to context manager from process owning it [ 770.589101] binder: 19791:19859 transaction failed 29201/-22, size 0-0 line 2843 03:38:42 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf00}}}, 0xd8}, 0x1}, 0x0) 03:38:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000016b000)="78733976000898fcffff6054be13cfe62785ce10", 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) timer_create(0x1, &(0x7f00000006c0)={0x0, 0x35, 0xffffffffffffffff, @thr={&(0x7f0000000640)="ee839bd3aaa7a7892b", &(0x7f0000000680)=']'}}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000280)) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept4(r0, &(0x7f00000002c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000340)=0x80, 0x800) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read(r3, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$KDSETLED(r0, 0x4b32, 0x8) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000100)) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000000c0)="34da14d0bee558d952c1e80f108f4be9029d68ba3ee7443b", 0x18}], 0x1, &(0x7f00000034c0)}, 0x0) recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x3e3, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000380)={0x4, 0x8000, 0x1000, 0x3, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x9, 0x2, [0x9, 0x5432]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000480)={r6, 0x7fff, 0x9, 0x5, 0xffff, 0x7, 0x0, 0x7, {r7, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x280000000, 0x0, 0x6b}}, &(0x7f0000000540)=0xb0) [ 770.709335] binder: undelivered TRANSACTION_ERROR: 29201 03:38:42 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) 03:38:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x141a00) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000140)={0x7, 0x3ff, 0x9, 0x4, 0x4, 0x8}) 03:38:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x13}}}, 0xd8}, 0x1}, 0x0) 03:38:42 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/74, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340)='/dev/vcs\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000043c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000004540)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x82000048}, 0xc, &(0x7f0000004500)={&(0x7f0000004400)={0xec, r2, 0x202, 0x70bd28, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff1d4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:38:42 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:42 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x5201}], 0x1, 0x0) close(r0) 03:38:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 771.102344] binder: 19887:19894 ERROR: BC_REGISTER_LOOPER called without request 03:38:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xb400000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="f8a8ec271597ddb751f6c10d3bb7b7a4d8e2b3c0a057f204b3b5b844280279d224da8a59a0b768ba916cea21ef628f044a01ca677b7b3570c76f9d7f98df17033242056834ec172a", 0x48}, {&(0x7f0000000240)="7edacaae425c09c1c6469a05a7cc1b96fb4ee6e9a4fe8fb31ba46a5e1e21c8a3c0651d788e19133157ea3379ba0dceee95f9ad3447b150c145b38f12da8cfb75ae9d4d19062d4d72d88ab50286b8ffe608b39221f76d6f193314d56a2d597a66a019a8f003c8383585785d6dfac9c42d418b034c1fc1464a06eb0aec07fdb3356c", 0x81}, {&(0x7f0000000300)="2bb94f3c20f01fb6c1e5c66812230070f6fb6b2058f303c6dd5a4bbf24fa6c4b044e56e15fc2605a1c8c5c414c1d031224d7e3bb01fa41e6b6dfc199548054324f64ca8341a34118bbaf44e8bbd85e34e52e2894d872d6c80f7221a1777154870bc469f9007038d29f9dc3040500aaa85ed47ad3de38d02e17bf2094691539f5752796f336c97a83d011d7ee3c2c02187248058fe3d44b1a3663a76d684fbb69feffa0bc4a838d6913678b6e50b94c4c9475ff939a8627fbde5f1ceb90", 0xbd}], 0x3, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000180)="abc00001df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 03:38:42 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x61, 0x20880) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x5, 0x4) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/38) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 03:38:42 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42", 0x42, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r0, r1, &(0x7f0000000240), 0x100000000002) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r2) 03:38:42 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:42 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000300000000000019078ac2314beac1414fdff907800000000420000000000000000040000ac1414aaac14140000"], &(0x7f0000000040)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8080) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) [ 771.887824] binder: 19887:19942 BC_FREE_BUFFER u0000000020001000 no match [ 771.894969] binder: 19887:19942 got transaction to context manager from process owning it [ 771.903405] binder: 19887:19942 transaction failed 29201/-22, size 0-0 line 2843 [ 772.020645] binder: undelivered TRANSACTION_ERROR: 29201 03:38:43 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) 03:38:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x900}}}, 0xd8}, 0x1}, 0x0) 03:38:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:43 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248", 0x43, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x10400) sendto$inet6(r2, &(0x7f0000000200)="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", 0x1000, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffffffffff8, @loopback={0x0, 0x1}, 0x38}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x1e) 03:38:43 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x3}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x182) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x32, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x1, 'nq\x00', 0x0, 0x81, 0x2b}, {@empty, 0x4e21, 0x3, 0x7, 0x1, 0x4}}, 0x44) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x2302}, 0x1}) 03:38:43 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x4, 0x0) close(r0) 03:38:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xea0d000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 772.177589] binder: 19951:19953 ERROR: BC_REGISTER_LOOPER called without request 03:38:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xd}}}, 0xd8}, 0x1}, 0x0) 03:38:43 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248", 0x43, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x9, 0xa84d, 0x4}, 0x10) r2 = memfd_create(&(0x7f00000000c0)="e3000000fb7945e6e3162ab7a309db8fc11273fd9d3a0d5ffaea55bc35ae0bf54e334119572aa8ea29df2591f26290316a41e9186016bf54b8259202a49e94330d5cad9a632164abb02c4714a1b106731aa627b7304799ac2c0d44447b28e6e166e4ef7ff84c07154d101e41212334a126ad247a7b75ae6b2971b7bca3af716ce547ba4bf49d04407820553c24dc8c5f7e38016922fd0e505a8311d60f6e39aeb737fa746e5d8849ac21df114ce914579e9d75c114d2566a3def8a42fd32f510863043828d41c46c249595fc9b", 0x0) timerfd_create(0x5, 0x80000) r3 = fcntl$dupfd(r2, 0x0, r2) fallocate(r3, 0x0, 0x0, 0x8) lseek(r2, 0x0, 0x4) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) close(r2) 03:38:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x17}}) 03:38:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1900000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1008000006, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f000079a000)}]) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x4da, 0xfffffffffffffffe, 0x5, 0x1b9c, 0x6, 0x9, 0x0, 0x2, 0x4, 0x2, 0x74a, 0x54b82d23}) [ 772.957818] binder: 19951:20013 BC_FREE_BUFFER u0000000020001000 no match [ 772.964913] binder: 19951:20013 got transaction to context manager from process owning it [ 772.973378] binder: 19951:20013 transaction failed 29201/-22, size 0-0 line 2843 [ 773.091542] binder: undelivered TRANSACTION_ERROR: 29201 03:38:44 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) 03:38:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:44 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x5993, 0x4) close(r1) 03:38:44 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248", 0x43, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1b00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x2034afa5, 0x0) close(r0) 03:38:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 03:38:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) [ 773.267540] binder: 20032:20034 ERROR: BC_REGISTER_LOOPER called without request 03:38:44 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1300000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xc1fff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000006fa8)={{0x50f, 0xa0000001}, 0x1}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 03:38:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x57, 0x0) close(r0) 03:38:44 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 03:38:44 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 774.066497] binder: 20032:20080 BC_FREE_BUFFER u0000000020001000 no match [ 774.073614] binder: 20032:20080 got transaction to context manager from process owning it [ 774.082054] binder: 20032:20080 transaction failed 29201/-22, size 0-0 line 2843 [ 774.208544] binder: undelivered TRANSACTION_ERROR: 29201 03:38:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1700}}}, 0xd8}, 0x1}, 0x0) 03:38:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20007ffd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, [0x4, 0xc1, 0x1, 0x2, 0x40, 0x7, 0xffffffffffffffc1, 0xfff, 0x1000, 0x10000, 0x4, 0x4, 0x4, 0x8, 0xfffffffffffffffd]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r1, 0x2}, &(0x7f00000001c0)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000240)=0x7ff) fadvise64(r0, 0x0, 0x0, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x80000001, 0x8001, 0x6, 0xa0, 0x6, 0x36ee, 0x4, 0x50, 0x4, 0x9, 0x5c6, 0x7}) 03:38:45 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:45 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7947, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x81, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x2c, 0x18, 0x9, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, @typed={0x4, 0x4, @binary}}]}, 0x2c}, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x6, @link_local={0x1, 0x80, 0xc2}}) 03:38:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x2, 0x0) close(r0) [ 774.310377] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 774.320590] binder: 20085:20088 ERROR: BC_REGISTER_LOOPER called without request 03:38:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:45 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x100000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:45 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f00000019c0)=@in6={0x0, 0x0, 0x0, @remote}, &(0x7f0000001a40)=0x80) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000001a80), 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477b13d944ae1bf9d72671070") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x1}, &(0x7f0000000280)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/186, 0xba}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/186, 0xba}, {&(0x7f0000001740)=""/190, 0xbe}], 0x7, &(0x7f0000001880)=""/185, 0xb9, 0x9}, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001980)={@loopback={0x0, 0x1}, 0x1e, r5}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r4, 0x825, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xba800000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd5}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c010}, 0x40008c0) [ 774.365449] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 774.429905] netlink: 'syz-executor5': attribute type 21 has an invalid length. 03:38:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:45 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f00000000c0)) [ 774.499364] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 774.510972] netlink: 'syz-executor4': attribute type 4 has an invalid length. 03:38:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa}}}, &(0x7f0000000380)=0x98) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r1, 0x0, 0x30}, 0xc) [ 774.554059] netlink: 'syz-executor4': attribute type 4 has an invalid length. 03:38:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl(r0, 0x7fff, &(0x7f0000000000)="2957e1311f16f4776710700b7d811b7da8f0c59caeb08e843ca321bcef046f9a6c392f7fbd6472be22ddb67aba8633e1d8baf99fcfa0c858e42aeca4ff9aba8d9593869abe9b2e4bcd8a9abe232fdb6a03a3e78fba071c2f69") r1 = socket(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:38:46 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f00000000c0)) [ 775.092902] binder: 20085:20156 BC_FREE_BUFFER u0000000020001000 no match [ 775.099981] binder: 20085:20156 got transaction to context manager from process owning it [ 775.108362] binder: 20085:20156 transaction failed 29201/-22, size 0-0 line 2843 03:38:46 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0xd000000}}}, 0xd8}, 0x1}, 0x0) 03:38:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:46 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x3, 0x100000000}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 03:38:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:46 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000005c0)={0x10}, 0xfffffffffffffe76, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x7, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", &(0x7f0000000440)=""/95, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 03:38:46 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f00000000c0)) 03:38:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x8, 0x0) close(r0) [ 775.233245] binder: undelivered TRANSACTION_ERROR: 29201 03:38:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:46 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f00000000c0)) 03:38:46 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x200002, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) init_module(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x12, &(0x7f0000000300)="7b236d696d655f74797065747275737465641f00") recvmsg$netrom(r0, &(0x7f00000018c0)={&(0x7f0000000340)=@full={{0x3, {"5e38816eb0edd3"}, 0x4}, [{"2a84d98f95db9b"}, {"404d2a60e576bc"}, {"86bc42699eff1b"}, {"073f76fee19399"}, {"b0a54f14088614"}, {"ea0b566fa480da"}, {"ed081fbe1b0287"}, {"d57d52241dff74"}]}, 0x48, &(0x7f0000001800)=[{&(0x7f00000003c0)="ec21b75a", 0x4}, {&(0x7f0000000400)="bd406f6dc6f2d65a4d3d7a2f6ee28ddc9030a94a44df1d035bb7451c4fef247d230cc270ac774eb8c1e70778d27f7d2b58f3ccc58060daefacb6ca703ae178505b83c9721dc1bf01c02c3c9235", 0x4d}, {&(0x7f0000000480)="799de10d198396340b3484972994e084ae160e2523d91cb4f47bcc2e334dd201b50d80e493cf3b2954ffe0550957cb0d07869a01050c93e50e78f3c7e6f4c857e90c1c687129bad316fc52efcfdab624ba90c589f1835505c66b1d0be949daa93839106b4cd48e9bbb2bf7d0c9c86db0415baf7dd7d564721d6222e37e1195e7cb1d1631f49b91a7bfc5269f083c7d52d564bdb1e0de30d08cdee1e19c7a96928eb28717f69262557c524fc82ac5402b32455568729e7512ae6dabad9a9c46e18f5b7d880ea3b702073487b7ebee4242fab275cba34a9a479875d46159d683fa4e", 0xe1}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="b904ab8370622807508f506752983ef69e2ac16ae97523dd0bb4da2195d717ed380c63b72b9135b0c604e0a31030ca8074f9fca38f25a52711a17662651945470c8ecd6f3bcf1357081883703962ebb08e98f9297cbaf463c00c0cdbf7b873536cef4c836896930e6a2296b4259d0eae51e65dbd12786e6704c773c1d825cd633c15071608081a6aec763325ba8ebcce0242b8847c4efe3da578b06dc40f57bf", 0xa0}, {&(0x7f0000000680)="8474a94a008a2603cf3b068e61c1b4a8bcb01be0d94907", 0x17}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="aee5ce6e37d7e8290a36eae0cf367b03b6e25a1671da3b5b959bd6219488f15b95c108196079ede2db8e", 0x2a}, {&(0x7f0000001700)="db314a93b750381f073fcd3db9ef0c1e73850e154ac0902f0a5a55e030359e5251495604e1ebc8a4f6176ae0664f0f09c5afd2a6cdea4b1857978abecc3fa2a8b19b82598ca2541b67c376af7d25ff04a4c6f954cf5379359ceaadc4816bcb446e9d98f332b97137aa680000514c8eae25d3be44fa99d11fa0a1cd23638abc7c57c7535b68932c323084c0858f3f4132bc7034c9d08bcde0b73966f2c580ea3a6db6158d66d1a3d8341d43ff2e8dc3ce8ff1d13c1de5fc660addd0aefc3267cd14e0294921e83986f5b1892b86e1dc3acbbdab55d470a9562eb56e9f86441fac", 0xe0}], 0x9, 0x0, 0x0, 0x800}, 0x40000000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001900)=0xe6, 0x4) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000001940)=0x8001, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001980)={0x7, [0x9, 0x1000, 0xba50, 0x7, 0xffff, 0xfffffffffffffffb, 0x8]}, 0x12) getsockopt$ipx_IPX_TYPE(0xffffffffffffff9c, 0x100, 0x1, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x20, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {0xd}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x20}, 0x1}, 0x800) timer_create(0x3, &(0x7f0000001b80)={0x0, 0x1b, 0x4}, &(0x7f0000001bc0)=0x0) timer_delete(r4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001c00)={0x0, 0xb0, "57d678cb4e250145b156410bba577587ef6a49af2c98321d85bc8c847519c1abf517fccebaee3d5bc3e0c249e6e407e4d1f341d34442739aac1d3799b874ca706cc41ba0e7a7cdcc70b37809357694cc5758110f7cc6dc50c5fc6cc26382af144411c373d59ce49a9ec0e7271fde02571a12d07e21b644b3b428e86b13cc34c39485682a404b221821846c8164280304e41f61a66bca855ff903ddad7928fc8cd3382c0a23b327c20e26102afbff7aa1"}, &(0x7f0000001cc0)=0xb8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001d00)={r5, 0x7}, &(0x7f0000001d40)=0x8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001d80)=""/214) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000001e80)) syncfs(r7) write(r1, &(0x7f0000001ec0)="489b66422c20af13ab4509e620d063c99de6cc33ee10a218591394aac59327226c4b00bdc5af11b2abe344da34b0d2e7cf9457261c73ce85f6f14e29a60cabaa115e338c11729d", 0x47) removexattr(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)=@known='security.evm\x00') getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001fc0)={r6, 0x5}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002080)={&(0x7f0000002040)='./file0\x00', r1}, 0x10) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000020c0)=""/137) r8 = openat$cgroup_ro(r1, &(0x7f0000002180)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000021c0)={r6, 0x7, 0x3}, &(0x7f0000002200)=0x8) 03:38:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x6}}}, 0xd8}, 0x1}, 0x0) [ 775.354702] binder: 20183:20184 ERROR: BC_REGISTER_LOOPER called without request 03:38:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x7, 0x3) r1 = socket$inet6(0xa, 0xfffffffffffffffd, 0x7) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x1000000000000032, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) 03:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008914, &(0x7f0000000040)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x25}}) close(r2) lseek(r0, 0x0, 0x3) close(r1) 03:38:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x11000000}}}, 0xd8}, 0x1}, 0x0) [ 776.117292] binder: 20183:20225 BC_FREE_BUFFER u0000000020001000 no match [ 776.124428] binder: 20183:20225 got transaction to context manager from process owning it [ 776.132825] binder: 20183:20225 transaction failed 29201/-22, size 0-0 line 2843 03:38:47 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) lseek(r0, 0x0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:47 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f00000000c0)) 03:38:47 executing program 5: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 03:38:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1a9001, 0x0) close(r0) 03:38:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2000000}}}, 0xd8}, 0x1}, 0x0) 03:38:47 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:47 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7cb20300, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x84000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x40) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp(0x0, 0x0, &(0x7f0000001680)={0x0, &(0x7f0000001700)}) [ 776.298660] binder: undelivered TRANSACTION_ERROR: 29201 03:38:47 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x5201, 0x0) close(r0) 03:38:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb00000000000000}}}, 0xd8}, 0x1}, 0x0) [ 776.366729] binder: 20254:20256 ERROR: BC_REGISTER_LOOPER called without request 03:38:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r2, &(0x7f0000003200)={&(0x7f0000000400)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x3, &(0x7f0000003000)}, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x2, 0x4) 03:38:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x81000000}}}, 0xd8}, 0x1}, 0x0) 03:38:48 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = msgget(0x1, 0x35) msgctl$IPC_RMID(r1, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000240)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r3, 0xffffffffffffff7f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="0900c3560000", @ANYRES16=r5, @ANYBLOB="00022dbd7000ffdbdf250300000008000400030000000800040002000000080002000200000004000500080001004e240000080001004e2100000800020002000000080001004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40005) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000005c0)=0x5, 0x4) r6 = accept4(r3, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x3e, 0x0) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x2, 0x2d}, 0x98) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000000500)=""/186) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000140), &(0x7f0000000040), &(0x7f00000001c0)={&(0x7f0000000ff8), 0x8}) 03:38:48 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btr.s\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:48 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x10, 0x0) close(r0) 03:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r4 = dup(r3) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) sendto$inet(r1, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x71, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 03:38:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xd00}}}, 0xd8}, 0x1}, 0x0) 03:38:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1400}}}, 0xd8}, 0x1}, 0x0) [ 777.151976] binder: 20254:20315 BC_FREE_BUFFER u0000000020001000 no match [ 777.164152] binder: 20254:20315 got transaction to context manager from process owning it [ 777.172636] binder: 20254:20315 transaction failed 29201/-22, size 0-0 line 2843 03:38:48 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:48 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btr/s\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x11000000}}}, 0xd8}, 0x1}, 0x0) [ 777.328646] binder: undelivered TRANSACTION_ERROR: 29201 03:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb400}}}, 0xd8}, 0x1}, 0x0) [ 777.370448] binder: 20339:20340 ERROR: BC_REGISTER_LOOPER called without request 03:38:48 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfl\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:49 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000445ffc)=0x2, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='map_files\x00') getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=0xfa) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000280)={0x2, 0x7fff, 0x7, 0x7, 0x5, 0x3}) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r1}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5219c37c455a10a2e00ff041419f978288c053ae964c5d760368dfde3fae692642d505", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf250200000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0x101000) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000200)=""/33) 03:38:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x3, 0x0) close(r0) 03:38:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x9}}}, 0xd8}, 0x1}, 0x0) 03:38:49 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfx\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x26, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x5}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0xfffefffffffffffd}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)) 03:38:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1000000000000000}}}, 0xd8}, 0x1}, 0x0) [ 778.169640] binder: 20339:20390 BC_FREE_BUFFER u0000000020001000 no match [ 778.188292] binder: 20339:20390 got transaction to context manager from process owning it [ 778.196816] binder: 20339:20390 transaction failed 29201/-22, size 0-0 line 2843 03:38:49 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x4000040, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0xfffffff5, &(0x7f0000019fa0), 0x1f2, &(0x7f000001ef08)}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x4b9b, 0x1, 0x6, 0x3c8e, 0x2}, 0x98) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=""/89, 0x59}, 0x40002042) 03:38:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:49 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf+\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 778.345798] binder: undelivered TRANSACTION_ERROR: 29201 03:38:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xe}}}, 0xd8}, 0x1}, 0x0) 03:38:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x84) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000008) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)) 03:38:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:49 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf#\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 778.483716] binder: 20422:20423 ERROR: BC_REGISTER_LOOPER called without request 03:38:50 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6606"]}, 0x1c}, 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x9, 0xfad}) 03:38:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x7ffff000, 0x0) close(r0) 03:38:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x19}}}, 0xd8}, 0x1}, 0x0) 03:38:50 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf0\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f00000000c0)="80609066450057fc1c0300473c15f15ee71ebbb0212f5cb643d8") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, &(0x7f00000002c0)=@ioapic) 03:38:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setpipe(r0, 0x407, 0xc28c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") fcntl$getflags(r0, 0xb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20002, 0x0) socket$inet6(0xa, 0x80006, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r3, &(0x7f0000000180)=0x2, 0x10001) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) [ 779.237153] binder: 20422:20499 BC_FREE_BUFFER u0000000020001000 no match [ 779.244397] binder: 20422:20499 got transaction to context manager from process owning it [ 779.252791] binder: 20422:20499 transaction failed 29201/-22, size 0-0 line 2843 03:38:50 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0d000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xc000000}}}, 0xd8}, 0x1}, 0x0) 03:38:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:50 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfX\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x152, 0x0) close(r0) 03:38:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xf4, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x834}, @in6={0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in6={0xa, 0x4e23, 0x7, @empty, 0x7}, @in6={0xa, 0x4e22, 0x10001, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x7}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xa}, 0x1}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e21, 0x7, @empty, 0x9}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001900010700000000000094bb2d00000a00000000000000000000000c001f0008000000b66bbb15aed97e0621525dbdb0ef1e294222ee7288becdf72091c0b35b4cb42bef909c26410032b70fee94567ca45d08f2d349abc7287395bb0fad5bfca9e65c43b47c4342492bfdfc53ae122ebd7bcacc209d68d2fbab0152535bed13b35154cac46487890300000000000000380d3f067439d3da4248305bd0c600", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) 03:38:50 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001400)="6d776ec1848606935fffec55b250fb2e55cbe03df52e544eb9e3e91400160076be051024233076cb76d1cef10cee9f15af7fd9cfa82a7e1fbcbfef90bf9896d9e9f6a14ed60fb686d9d689cb623aaec6a411e65422f150caa4d80101bd473d17155d863266d14e7e80b25c625f34cb8a54559908e3ff988d0a459795a852b18b884039b2a65530b51ccbe0c877822a8509078f7e06cecb91476cd3c46267da774d3aa5e673dc7478b8fe1519c2a8bc19deb1417c9bcc4d4a7100120f849ac017fdad0ed945895d", 0x50}, {&(0x7f00000012c0)="dcb334d63ba9df48633f169c814c46f74b309be7be23e47ef7dd911368ee839f6f325576671a644328f8eda003bc2f4d331aa2ec93a75fabcad27e35ca5b2abf8f19faefb93e6f786d7cb87f27d8de96bd9c593b7a627a74c5333f6a5a8ea0ca25968fd81077d06e32065dbc1f44882bc997a82d58205222e666ae19955798f1a4450b4f4d2f15007f8224f02abb5fce3199e0c018013b2edb1f177f9b4e1127feb215c6e2417485d1d1fe09cd5763eae7fa877a368b910f6a2c1bfde2e61b886f4b", 0xc2}, {&(0x7f0000001500)="a4b5539ce63dc1c547127b70157da024b0790b9d9bedbc86b6171b1c07cfef8630ee6ba40f261ab1ed393b9ec16f63269b1e976b120cd2e093d5a2f1a1ae10535d68640456c741bef692caa1b9f002519ed3db03c759c5342b6e088c19ea2017db5adbf4b3a7a11f8ce5368f9c9533f0b929707f4e4f33fe40dd7ebef9d0b625e07b112e9cd936e59049731174679a1562d7a12eeea10900f52bc31ad7cba370b737ca0fc77d784ae698a309fbfbfb12e9e415c786fc80b48ff00820a3d2e49aa955eeb48872f62ec2952c32c6bf0830754572897dda9a72579b8152f5cdac6aaac191efc5e1811f57c0afba8c58e7bbc522397fb3c093637f36a7f4ecde544f9e154969389ff81b2cbef2b12e216c0ee4f5fde77dcb3000c85c3ddf0110d958936ff93d8c859ce67f", 0x26}, {&(0x7f00000013c0)="e9e16de129de4194cf29365c4727c04638aeec64a84c", 0xfffffffffffffde0}, {&(0x7f00000016c0)="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", 0x1000}], 0x5}, 0x0) [ 779.369931] binder: undelivered TRANSACTION_ERROR: 29201 03:38:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 779.435175] binder: 20518:20519 ERROR: BC_REGISTER_LOOPER called without request 03:38:51 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) shutdown(r0, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x2}) socket(0x11, 0x4000000000080002, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x3, 0x8]) 03:38:51 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfd\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x10000000000002d1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x0, [0x4b564d03, 0x0, 0x48, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:38:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x8100}}}, 0xd8}, 0x1}, 0x0) 03:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 779.887186] unchecked MSR access error: RDMSR from 0x48 at rIP: 0xffffffff811f5311 (vmx_vcpu_run+0x1f91/0x2600) [ 779.897460] Call Trace: [ 779.900080] ? vmx_save_host_state+0xa60/0xa60 [ 779.904689] ? __lock_is_held+0xb5/0x140 [ 779.908799] ? vcpu_enter_guest+0xe8d/0x6090 [ 779.913228] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 779.917496] ? kvm_set_msr_common+0x26a0/0x26a0 [ 779.922181] ? zap_class+0x740/0x740 [ 779.925911] ? vmx_vcpu_load+0xadf/0xff0 [ 779.929986] ? __lock_is_held+0xb5/0x140 [ 779.934067] ? __account_cfs_rq_runtime+0x600/0x600 [ 779.939099] ? vmx_vcpu_reset+0x1040/0x1040 [ 779.943434] ? graph_lock+0x170/0x170 [ 779.947250] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 779.952638] ? __lock_is_held+0xb5/0x140 [ 779.956731] ? kvm_check_async_pf_completion+0x3a7/0x5c0 [ 779.962638] ? kvm_clear_async_pf_completion_queue+0x790/0x790 [ 779.968629] ? kvm_arch_dev_ioctl+0x610/0x610 [ 779.973136] ? preempt_notifier_dec+0x20/0x20 [ 779.977656] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 779.982511] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 779.987553] kvm_vcpu_ioctl+0x7b8/0x1300 [ 779.991635] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 779.997365] ? trace_hardirqs_on+0xd/0x10 [ 780.001531] ? find_held_lock+0x36/0x1c0 [ 780.005620] ? lock_downgrade+0x8f0/0x8f0 [ 780.009783] ? rcu_is_watching+0x8c/0x150 [ 780.013943] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 780.018379] ? __fget+0x414/0x670 [ 780.021858] ? expand_files.part.8+0x9c0/0x9c0 [ 780.026475] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 780.032202] do_vfs_ioctl+0x1de/0x1720 03:38:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x2}}}, 0xd8}, 0x1}, 0x0) 03:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 780.036105] ? ioctl_preallocate+0x300/0x300 [ 780.040527] ? __fget_light+0x2f7/0x440 [ 780.044517] ? __schedule+0x1ed0/0x1ed0 [ 780.048510] ? fget_raw+0x20/0x20 [ 780.051994] ? exit_to_usermode_loop+0x8c/0x370 [ 780.056682] ? security_file_ioctl+0x94/0xc0 [ 780.061104] ksys_ioctl+0xa9/0xd0 [ 780.064564] __x64_sys_ioctl+0x73/0xb0 [ 780.068456] do_syscall_64+0x1b9/0x820 [ 780.072348] ? finish_task_switch+0x1d3/0x890 [ 780.076855] ? syscall_return_slowpath+0x5e0/0x5e0 [ 780.081787] ? syscall_return_slowpath+0x31d/0x5e0 [ 780.086734] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 780.092116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 780.096975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.102180] RIP: 0033:0x455b29 [ 780.105365] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 780.124878] RSP: 002b:00007f7ae6cd5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.132593] RAX: ffffffffffffffda RBX: 00007f7ae6cd66d4 RCX: 0000000000455b29 [ 780.139848] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 780.147103] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 780.154372] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 780.161625] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000000 [ 780.235309] binder: 20518:20570 BC_FREE_BUFFER u0000000020001000 no match [ 780.246432] binder: 20518:20570 got transaction to context manager from process owning it [ 780.254972] binder: 20518:20570 transaction failed 29201/-22, size 0-0 line 2843 03:38:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x3}}}, 0xd8}, 0x1}, 0x0) 03:38:51 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf%\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:51 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000140)={0x2, 0x7, 0x1}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) rt_sigqueueinfo(r3, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) sched_getparam(r3, &(0x7f00000000c0)) 03:38:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x10000000000000) close(r0) 03:38:51 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) readv(r0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/240, 0xf0}], 0x1) r1 = getgid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x11) setregid(r1, r2) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3, 0x0) [ 780.370197] binder: undelivered TRANSACTION_ERROR: 29201 [ 780.389633] Unknown ioctl 1074310812 [ 780.413244] Unknown ioctl 1074310812 03:38:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565b00000000000000000000002000000000000002400000000000000000000000007000000000000003f00f114ba94e0e7040025af95951b86aa6500"}) sched_setattr(0x0, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$inet(0x2, 0x4, 0x7fff, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x40, 0x9e, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) seccomp(0x0, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x40, 0xfffffffffffffffb, 0x80000000, 0x8}, {0x1c00000000, 0x7fff, 0x7, 0x5}, {0x5, 0x7, 0x7, 0x7}, {0xeec8, 0x180000, 0x1, 0x1}, {0x4, 0x3, 0x80, 0x2}, {0x4, 0x1, 0xfffffffffffffffc, 0x7ff}, {0x202, 0xa2, 0x9}, {0x8, 0x1b8, 0x401, 0xffffffff}]}) [ 780.470980] binder: 20592:20595 ERROR: BC_REGISTER_LOOPER called without request 03:38:52 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x7fff) pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1a00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2400000020002553075f01650272fc02800000200010fdffda678b6883430112b34387d1", 0x24) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000d0"], 0x6) r1 = semget$private(0x0, 0x0, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfffffffffffffffd, 0x4000) ioctl$TIOCSBRK(r2, 0x5427) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000180)=""/4096) poll(&(0x7f0000000140)=[{r2, 0x402}, {r2, 0x10}, {r0, 0x1}, {r0, 0x408}, {r2, 0x4420}], 0x5, 0x1) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000040)=""/123) 03:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x200000) close(r0) 03:38:52 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf*\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 780.784292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 780.851892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:38:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x100000) close(r0) [ 781.237957] binder: 20592:20647 BC_FREE_BUFFER u0000000020001000 no match [ 781.245153] binder: 20592:20647 got transaction to context manager from process owning it [ 781.253550] binder: 20592:20647 transaction failed 29201/-22, size 0-0 line 2843 03:38:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1100}}}, 0xd8}, 0x1}, 0x0) 03:38:52 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf-\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) ioprio_set$uid(0x3, r2, 0x7) 03:38:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x5000) close(r0) [ 781.372558] binder: undelivered TRANSACTION_ERROR: 29201 03:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 781.464572] binder: 20669:20670 ERROR: BC_REGISTER_LOOPER called without request 03:38:53 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3, 0xf0000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001640)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x4000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000200)=""/74, 0x0, 0x800, 0x9}, 0xffffffffffffff2c) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000001700)='/dev/amidi#\x00', 0x9, 0x40000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="f11ab67bb54128408fdf837d5e8286bac8303fc542d47c53cd98751f7858c69912c83b129fcab73f46ccdc0c1c074f4bf3083bc067b011089cb59ac885f4b2ad7a2ebd746bb3c329831c55bdbaced9149447c083051fb4d786b0269add8890dd7a3e3b8b7f5a6a876068581b65c80225f220bef28ebec3a6c4ee3d1a45b22e54501db61c6741b7669d38ff392ac0df3f26851c9923bd42d5f185bb13849f9d4e4ba0e2f005f2bed9ee968b1e1bbb470d433ca2b94deb568df9a7de9915b818e98200e3a8b8fe545740b6a25e2fe32c91904520c757031730c00510b28c73881973d054615f3c102b7bf51625958f9ffa4b9b9695edfbe2", 0xf7, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="6af609bbf481791a4cc07c679dcc66ef41f9838aba3149c22a6679afe72992c28b59bfe8f31424316d9036d29e6117d972d2a66753d56e43c4fe8d44af487c15967b4c89fc9dfd3b7f1e2fe8244532d1e09f67a7193340dc4096258011725d185ac13d88269e66f5d13eb2746685df0bdbfaee2b6413f14477d91ee1ee621dfc7031889ecd4d882951afd05d5d476a75518863811492a9f1c7f377553b6cdad08811cc8d0b12de9d43da5364389fabd3802698307e43df345499a5b3f8204b92dd0aac8ddca4f96b22b6d9686f3e3a5f8f4a1d45d228eb7d9f3145c15af2724fd1da05b55be9844b", 0xe8, 0xfffffffffffffffd) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) mount(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='hugetlbfs\x00', 0x800000, &(0x7f0000000640)="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") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) fdatasync(r4) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 03:38:53 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:53 executing program 5: r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000bc0)=@broute={'broute\x00', 0x20, 0x6, 0xb50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x42, 0x8914, 'team_slave_1\x00', 'eql\x00', 'veth0\x00', 'syz_tun\x00', @random="ea9ef93c1659", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x1e0, 0x1e0, 0x210, [@comment={'comment\x00', 0x100}, @ip={'ip\x00', 0x20, {{@rand_addr=0x4, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xff000000, 0x10000, 0x6, 0x2, 0x0, 0x4e22, 0x4e23, 0x4e21, 0x4e22}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x9, 0x6, 0x6005, 'bridge_slave_0\x00', 'bpq0\x00', 'ip6_vti0\x00', 'ipddp0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [0xff, 0x0, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xf0, 0x140, 0x1b8, [@connbytes={'connbytes\x00', 0x18, {{0x7, 0x101, 0x0, 0x1}}}, @mark_m={'mark_m\x00', 0x18, {{0x0, 0x10000, 0x3, 0x2}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', 0x17c}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x800, 0x7, 0x9b, 0x0, 0x0, "2a8614124572ff547702ac7ea0a9be8072ccf0d398ed167c1e4129b7048b05999b902d898c033457829118a8ec59b8937ec66b5c2b1150e3fdea731c20bc8ff7"}}}}, {{{0x0, 0x40, 0x88f8, 'veth1_to_team\x00', 'vcan0\x00', 'erspan0\x00', 'ip6gre0\x00', @empty, [0x0, 0xff, 0x0, 0x6f78ddbebf2fbbce, 0xff, 0x453b97a6e1fa64d6], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x100, 0x130, 0x160, [@helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}, @devgroup={'devgroup\x00', 0x18, {{0x3, 0x682, 0xfffffffffffffffd, 0x2, 0x10001}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{{{0x13, 0x21, 0x9200, 'vcan0\x00', 'ip_vti0\x00', 'syzkaller0\x00', 'ipddp0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, [0xff, 0xff, 0x66e8c375318336b3, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:audisp_exec_t:s0\x00'}}}}, {{{0x3, 0x5, 0x88e5, 'nr0\x00', 'bridge_slave_0\x00', 'ip6tnl0\x00', 'dummy0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @random="2112c9e9fb2f", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x148, 0x178, 0x1c0, [@physdev={'physdev\x00', 0x70, {{'irlan0\x00', {0xff}, 'bridge0\x00', {}, 0x11, 0xc}}}, @quota={'quota\x00', 0x18, {{0x1, 0x0, 0x3, 0x5}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"22b64d631530241fe562cbea0c2eef1e3c80ece79ddddc0c22e744ef90a0"}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x1, [{{{0x1b, 0x0, 0x0, 'ipddp0\x00', 'vcan0\x00', 'ip6tnl0\x00', 'yam0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0x1d8, 0x208}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffe}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffffffffffffffdd, 'system_u:object_r:hald_exec_t:s0\x00'}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0xbc8) setsockopt$sock_attach_bpf(r0, 0x11b, 0x32, &(0x7f0000002340), 0x4) 03:38:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x2000) close(r0) 03:38:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x900}}}, 0xd8}, 0x1}, 0x0) 03:38:53 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfc\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:53 executing program 4: lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/kvm\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0xc048ae65, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:38:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mq_open(&(0x7f0000000000)='htcp\x00', 0x840, 0x0, &(0x7f0000000040)={0x0, 0x8000, 0x3}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, 0x12, 0x20, 0x5, "6134ecd7981f95defc692802f880314f6ee485a461e5cce0db96e804816db310b9e82dfcf3770382996383f8666b7c4a23db44fa9c5eca1ba68e3b3d036e290b", "ccafcd543dfccdb0d3a7597c75cfb408bfbfc4539cc1946d36e7de6f815f145c", [0xffff, 0x1]}) [ 782.246546] binder: 20669:20725 BC_FREE_BUFFER u0000000020001000 no match [ 782.254170] binder: 20669:20725 got transaction to context manager from process owning it [ 782.262538] binder: 20669:20725 transaction failed 29201/-22, size 0-0 line 2843 03:38:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:53 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfi\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x5000000000000000) close(r0) 03:38:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x15}}}, 0xd8}, 0x1}, 0x0) 03:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x4000000) prctl$intptr(0x2c, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) clock_getres(0x2, &(0x7f00000001c0)) r2 = getgid() syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x6000, r1, r2, 0xc7, 0x0, 0x10000) 03:38:53 executing program 5: keyctl$session_to_parent(0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x400, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x80802) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x2, 0xaf6, 0x1, 'queue1\x00', 0xff}) [ 782.380274] binder: undelivered TRANSACTION_ERROR: 29201 03:38:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 782.455483] binder: 20742:20745 ERROR: BC_REGISTER_LOOPER called without request 03:38:54 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) pread64(0xffffffffffffffff, &(0x7f0000000140), 0x20e, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = shmget$private(0x0, 0x1000, 0x106, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/76) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="d84f844e4e909936730a0ee733279670", 0x10}]) 03:38:54 executing program 4: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x6, &(0x7f0000002400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000080)="ed28d2ee588659d7d2a8d6944b1d8f1cbfce08742ce3d983e5172599d035798f73336fb4dc48a43f022143f0a9994a788cc5c86d4fa89df736379850e81b2c63306dea73e4ea78daa88714092a1a7a405ebfd19b69272c7f0b0b3bc9f09d52ccfd3ead50e79e660b603b832e0bc65cba7ab208e5c14e9a44f3c5d9a0cd3bf37e9d1e6e90adb7bceda2caec4421ed1bd2430734", 0x93, 0x501}, {&(0x7f00000011c0)="e718158216a65f033f9c6569ada8a41c33662930a73eb5f1b037d7dfa612bf568450bfdb3552a097bb33daa0f8644c5aba84f9d557a3f60bb8f3e374c84d91e20de926dd", 0x44, 0x8}, {&(0x7f0000001240)="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", 0x1000, 0x4ca5}, {&(0x7f0000002240)="35b762e93c0e9736afb4a7734e4989959c9fbdcff188888e9c8f15d3ed43890acfbeadbef420231e173d4f3c1016ef9d90de098401f7aea7233b6e6233016d74bf66270887a65b4a1cd8393726e4fd059c31f3be4a2d965c56e5f09b7748105b663ecc9a0085db5a51cfb2d8e24d03c5c86f5085869003824f973e5404b3ccfd296411e7aa13252ebcc64516e160959c3f5c6741b0196afdf43ad5d6885c218c3cc25ad80d519999cca06934", 0xac, 0x3f}, {&(0x7f0000002300)="e9bed6867f4ef92911ae11648e1e8f9bf690b895e44e4c5c0d68d890423aae2de21079ffd8a44622ae3d2f054239c6e092d1aa5dcb1f2ffb4d001e1120a97585ff65deb55910517b1e1f8b180e262b16955ef7c9b9d8a2a8dcef5e2801070a35e0c8f71a588a1ec1d410468792ad944a0bab1aae1ee5b11a50be40da3508a9f936792eaa4bd524492bebc04567f5bc7e6952fa543a0e622f19330159edcef2e6fd89db1c4d1d139245fe0f2b5a53d9bf9104d738908de52cf60c6dd4920dfeaac9843446ea33ad0d61c7f47e54ad", 0xce, 0x4}], 0x840, &(0x7f00000024c0)='}cpuset\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) connect(r0, &(0x7f0000002500)=@sco={0x1f, {0x3c1b, 0x1, 0x3ff, 0x5, 0x2c8, 0xffffffffffffffff}}, 0x80) r1 = open(&(0x7f0000002580)='./file0\x00', 0x2400, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000025c0)=r2) socket$unix(0x1, 0x0, 0x0) 03:38:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0xffffffff00000000) close(r0) 03:38:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb}}}, 0xd8}, 0x1}, 0x0) 03:38:54 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfu\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x10) close(r0) [ 783.235626] binder: 20742:20807 BC_FREE_BUFFER u0000000020001000 no match [ 783.242701] binder: 20742:20807 got transaction to context manager from process owning it [ 783.251075] binder: 20742:20807 transaction failed 29201/-22, size 0-0 line 2843 03:38:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:54 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrf.\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x13}}}, 0xd8}, 0x1}, 0x0) 03:38:54 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@kern={0x10, 0x0, 0x0, 0x420006}, 0xc) getpeername$ax25(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000540)='\\trusted+posix_acl_access/keyring\x00', 0x22, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0xbd, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001600)=""/4096, 0x1000) 03:38:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x6d, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x100) close(r2) close(r1) 03:38:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x200000000000000) close(r0) [ 783.369689] binder: undelivered TRANSACTION_ERROR: 29201 03:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 783.427721] binder: 20815:20818 ERROR: BC_REGISTER_LOOPER called without request 03:38:55 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb000000}}}, 0xd8}, 0x1}, 0x0) 03:38:55 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x2d, 0x4000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) membarrier(0x10, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, &(0x7f0000000000)=[0x0, 0x6]) finit_module(r1, &(0x7f0000000080)='\'\x00', 0x1) 03:38:55 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfo\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000000, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x77c, 0x121000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="06000600090000000008000100080000"], 0x14) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r1, 0x1}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x13, r0, 0x100000000) rmdir(&(0x7f00000000c0)='./file0\x00') 03:38:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x3f00000000000000) close(r0) 03:38:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000300100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x17000000}}}, 0xd8}, 0x1}, 0x0) [ 784.208907] binder: 20815:20879 BC_FREE_BUFFER u0000000020001000 no match [ 784.215959] binder: 20815:20879 got transaction to context manager from process owning it [ 784.224366] binder: 20815:20879 transaction failed 29201/-22, size 0-0 line 2843 03:38:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "6c13ee9601dacbd41600ae663857c6777422db20d8282220d6e88e64365b3695b6b702045527773b95598f68"}) 03:38:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000780)=@set_option={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffff, 0x0, 0x1, 0x4}}, 0x20) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cuse\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x800, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23}], 0x4c) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7fff, 0x400) ioctl$TCSBRK(r2, 0x5409, 0x101) r3 = msgget(0x2, 0xa2) msgctl$IPC_RMID(r3, 0x0) 03:38:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x20000000000000) close(r0) 03:38:55 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfp\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x4}}}, 0xd8}, 0x1}, 0x0) 03:38:55 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 784.342356] binder: undelivered TRANSACTION_ERROR: 29201 03:38:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x11}}}, 0xd8}, 0x1}, 0x0) 03:38:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008913, &(0x7f0000000000)="295ee10008000600000000") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x7d, &(0x7f0000ad2000)=ANY=[@ANYBLOB="eeffffff"], &(0x7f0000000080)=0x23c) [ 784.405091] binder: 20883:20885 ERROR: BC_REGISTER_LOOPER called without request 03:38:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xf) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4280, 0x0) bind$netrom(r1, &(0x7f0000000040)=@ax25={0x3, {"230893375edb11"}, 0xfff}, 0x10) 03:38:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x2000000) close(r0) 03:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:56 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x4000000000000000}}}, 0xd8}, 0x1}, 0x0) [ 785.176881] binder: 20883:20953 BC_FREE_BUFFER u0000000020001000 no match [ 785.183931] binder: 20883:20953 got transaction to context manager from process owning it [ 785.192306] binder: 20883:20953 transaction failed 29201/-22, size 0-0 line 2843 03:38:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:56 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'gre0\x00', @ifru_ivalue=0x70000f}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x141000) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000000c0)={0x0, 0x3, 0x4}) 03:38:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x200800, 0x0) lseek(r0, 0x0, 0x2000000000000001) fstat(r0, &(0x7f0000000140)) 03:38:56 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x3f000000) close(r0) 03:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000ffffffff00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:56 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1300000000000000}}}, 0xd8}, 0x1}, 0x0) [ 785.309640] binder: undelivered TRANSACTION_ERROR: 29201 03:38:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x5000000}}}, 0xd8}, 0x1}, 0x0) 03:38:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f0000000340)="02"}) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x54000) dup2(r1, r1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 03:38:56 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x3f00) close(r0) 03:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') ioctl(r0, 0x8912, &(0x7f00000001c0)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x3, 0xeb) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0x2}, 0x10) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0xfffffffffffffeb7, &(0x7f0000000000), 0x0, &(0x7f0000001140)=""/81, 0x51}, 0x0) r2 = dup(r0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x80, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x100000000000, 0x4}, 0xc) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x6, 0x6, 0x5}) 03:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 785.424945] binder: 20976:20977 ERROR: BC_REGISTER_LOOPER called without request 03:38:56 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)="6274726673c4", &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb00}}}, 0xd8}, 0x1}, 0x0) 03:38:56 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 785.573059] binder: BINDER_SET_CONTEXT_MGR already set [ 785.604823] binder: 20994:20998 ioctl 40046207 0 returned -16 [ 786.205718] binder: 20976:21023 BC_FREE_BUFFER u0000000020001000 no match [ 786.212791] binder: 20976:21023 got transaction to context manager from process owning it [ 786.221178] binder: 20976:21023 transaction failed 29201/-22, size 0-0 line 2843 03:38:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40040) ioctl$TIOCSBRK(r1, 0x5427) getsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffee9) 03:38:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:57 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x2) close(r0) 03:38:57 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs-', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x8}}}, 0xd8}, 0x1}, 0x0) 03:38:57 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 786.339176] binder: undelivered TRANSACTION_ERROR: 29201 03:38:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:57 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 786.448659] binder: BINDER_SET_CONTEXT_MGR already set [ 786.471093] binder: 21045:21046 ioctl 40046207 0 returned -16 [ 786.486542] binder: BINDER_SET_CONTEXT_MGR already set [ 786.499897] binder: BINDER_SET_CONTEXT_MGR already set [ 786.508309] binder: 20994:21051 ioctl 40046207 0 returned -16 [ 786.509057] binder: 21045:21046 ERROR: BC_REGISTER_LOOPER called without request [ 786.537927] binder: 20994:21029 ioctl 40046207 0 returned -16 03:38:58 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = memfd_create(&(0x7f0000000000)='eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x3, 0x6}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f4, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_hwaddr}) 03:38:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x14}}}, 0xd8}, 0x1}, 0x0) 03:38:58 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:58 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x8000000000000000) close(r0) 03:38:58 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200500, 0x0) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0xffffffffffffffff, 0x1f, 0x3}, 0x1, 0x1, 0x0, 0x0, "2a737a9854b61185"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x7, 0x7fff, 0x6, "febdd021d4ea2191695a1ce05f4d097b392289b7a85fa78cbbff476c3a628289dd01d219e8ca947caeb7d4442fbd41e1822e98aac23dedda60072a0688cd530331ccba3ab72833d218fc8eafbac7a55d"}, 0xd8) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)='/dev/zero\x00', 0xa, 0x0) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50200000000000000004e2f9663a918fa1efd9b0b"}, 0x9d8}, 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@host=0x2}) dup2(r0, r1) 03:38:58 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 787.250140] binder: 21045:21098 BC_FREE_BUFFER u0000000020001000 no match [ 787.257197] binder: 21045:21098 transaction failed 29189/-22, size 0-0 line 2852 03:38:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb400000000000000}}}, 0xd8}, 0x1}, 0x0) 03:38:58 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000e00)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1c000000000000000180000002610000", @ANYRES32, @ANYRES32, @ANYRES32], 0x1c, 0x1}, 0x24000000) 03:38:58 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200500, 0x0) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0xffffffffffffffff, 0x1f, 0x3}, 0x1, 0x1, 0x0, 0x0, "2a737a9854b61185"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x7, 0x7fff, 0x6, "febdd021d4ea2191695a1ce05f4d097b392289b7a85fa78cbbff476c3a628289dd01d219e8ca947caeb7d4442fbd41e1822e98aac23dedda60072a0688cd530331ccba3ab72833d218fc8eafbac7a55d"}, 0xd8) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)='/dev/zero\x00', 0xa, 0x0) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50200000000000000004e2f9663a918fa1efd9b0b"}, 0x9d8}, 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@host=0x2}) dup2(r0, r1) 03:38:58 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x1000000) close(r0) 03:38:58 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 787.375794] binder: undelivered TRANSACTION_ERROR: 29189 03:38:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d40008f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x216) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'rose0\x00', 0x2}) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000080)=0x5, 0x4) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/225, 0xe1) 03:38:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:58 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)="6274726673ff", &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 787.472758] binder: 21119:21120 ERROR: BC_REGISTER_LOOPER called without request 03:38:58 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x50000000) close(r0) 03:38:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="f6165ba19f0eb80e835a76e426caea77e1b93f497a35edd9c2888b4c82f9c081f34d03c81940497764e9c57fb29071093a1c8116ffffff7f00000000f595c3e3ed527106678554b6eb6b7be16ebfc87e1872313b906fcf16b47c9d6b9149e2160b8d1eee84b0a1e6fa13133a384d185522cc017645a7f5edbd59ebc519fb12c39fd80ea0000000000000000000000000000000e1a611d9a00000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x6000000}}}, 0xd8}, 0x1}, 0x0) 03:38:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:59 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x50) close(r0) [ 788.259855] binder: 21119:21169 BC_FREE_BUFFER u0000000020001000 no match [ 788.266867] binder: 21119:21169 got transaction to context manager from process owning it [ 788.275252] binder: 21119:21169 transaction failed 29201/-22, size 0-0 line 2843 03:38:59 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x4000}}}, 0xd8}, 0x1}, 0x0) 03:38:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x8000}}, 0x80000001, 0x3, 0xfffffffffffffffd, 0xffffffffffffffc0, 0x80}, &(0x7f0000000000)=0x98) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xfffffffffffffcc3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1}, 0x0) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:38:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000000000100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:59 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x100000000000000) close(r0) 03:38:59 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:38:59 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0xfffffffffffffffe, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000000)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/192, 0xc0}], 0x1, 0x0) syncfs(r1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x3, 0x7, 0x10000, 0x1a}, {0x9, 0x3f, 0x3, 0xffffffffffff7fff}, {0x0, 0x0, 0x3, 0x7}, {0x8e, 0x7, 0x0, 0x6}, {0x7, 0x0, 0x9, 0x2}, {0x6, 0xfffffffffffffff9, 0x3, 0x800}, {0x100000001, 0x0, 0x3f, 0x100000000}, {0x6, 0x101, 0x66}]}) [ 788.394130] binder: undelivered TRANSACTION_ERROR: 29201 03:38:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r2 = dup2(r0, r1) getpeername(r2, &(0x7f0000000040)=@hci={0x0, 0x0}, &(0x7f00000000c0)=0x80) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@rand_addr=0x80000000, 0x4e24, 0x0, 0x4e23, 0x5, 0x2, 0x80, 0x20, 0x33, r3, r4}, {0x0, 0x8, 0x8034, 0x8001, 0xfffffffffffff801, 0x9, 0x1, 0xffffffffffff1797}, {0x3, 0x800, 0x2, 0x2}, 0x57e9, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@loopback=0x7f000001, 0x4d6, 0x33}, 0x0, @in, 0x34ff, 0x2, 0x3, 0x101, 0xd7c, 0x4, 0xff}}, 0xe8) 03:38:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xf00}}}, 0xd8}, 0x1}, 0x0) 03:38:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:38:59 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)="62747266730f", &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:38:59 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000200)={{0x6, 0x7, 0x7, 0x3f, 'syz1\x00', 0x8}, 0x6, 0x5db4c60db9c16824, 0x5, r2, 0x2, 0x71, 'syz1\x00', &(0x7f0000000080)=['&vboxnet0[%lotrusted\x00', ']\\\x00'], 0x18, [], [0x3, 0xac, 0xffffffffffff009f, 0x88f]}) close(r1) [ 788.492920] binder: 21192:21193 ERROR: BC_REGISTER_LOOPER called without request 03:39:00 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x4) 03:39:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x180, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x5b, 0x2, 0x6, 0x400}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0x9}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x2, r1}) 03:39:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000feffff0700", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x600}}}, 0xd8}, 0x1}, 0x0) 03:39:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300), &(0x7f0000000340), 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00s@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:39:00 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\t', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 788.796572] binder: BINDER_SET_CONTEXT_MGR already set [ 788.818884] binder: 21232:21233 ioctl 40046207 0 returned -16 [ 788.830983] binder: 21232:21233 unknown command 1077965568 [ 788.839651] binder: 21232:21233 ioctl c0306201 20000440 returned -22 [ 788.867767] binder: BINDER_SET_CONTEXT_MGR already set [ 788.888493] binder: 21232:21239 ioctl 40046207 0 returned -16 [ 788.898474] binder: 21232:21233 unknown command 1077965568 [ 788.904378] binder: 21232:21233 ioctl c0306201 20000440 returned -22 [ 789.275954] binder: 21192:21250 BC_FREE_BUFFER u0000000020001000 no match [ 789.282994] binder: 21192:21250 got transaction to context manager from process owning it [ 789.291398] binder: 21192:21250 transaction failed 29201/-22, size 0-0 line 2843 03:39:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:39:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x300}}}, 0xd8}, 0x1}, 0x0) 03:39:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockname$inet(r3, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, r4, 0x1}, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001280)=[@textreal={0x8, &(0x7f0000001200)="ba2100ecbaa00066b8f347000066efbaf80c66b88ca1de8866efbafc0c66b80000000066ef66b9f10200000f320f2222660f2d942a100f00126626f3650f01779a66b8030000000f23c80f21f86635080070000f23f80f01c9", 0x59}], 0x1, 0x0, &(0x7f00000012c0), 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x46200, 0x0) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000000140)={0x1, 0xe07}) dup3(r1, r0, 0x80000) sendto$packet(r6, &(0x7f0000000380)="5536c06dd75bfee9f2a2e44cf8748f6d3975bd48ff258224e32e286ad264cd938a68ba0d5af5f7591896d6c9083f2fd3d2953988edf52f4851f4dcf0e64bc7860c8b3fbd3449d7b7c7ea294b52024f7177b027e6e930020fd073066806d69b699c74f712dac44927ca532f80193a8db3d603e2a3025c717ef0551b40f892e89cdcc48d5dde1242bce6f15c332e30ca774854b410d5a5253f3f24c629f5ea8adf3708750293051d96c911d51ee2d15397852359e7c20d5c88cbe82ab9ff15d2de06ea20bae4449c872562ff09003223", 0xcf, 0x20000000, 0x0, 0x0) 03:39:00 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfst', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) read(r0, &(0x7f0000000000)=""/110, 0x6e) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001000ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:39:00 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 789.410249] binder: undelivered TRANSACTION_ERROR: 29201 03:39:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x300000000000000}}}, 0xd8}, 0x1}, 0x0) 03:39:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:00 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x10000, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0x3, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() accept4$netrom(r0, &(0x7f0000000100)=@full, &(0x7f0000000200)=0x48, 0x80800) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r1) [ 789.525918] binder: 21271:21272 ERROR: BC_REGISTER_LOOPER called without request 03:39:01 executing program 4: r0 = inotify_init1(0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc400, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)="79616d300001178b00") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 03:39:01 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)="627472667302", &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xb4000000}}}, 0xd8}, 0x1}, 0x0) 03:39:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x400000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x1000) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da32}, [@nested={0x4, 0x27}]}, 0x18}, 0x1}, 0x0) 03:39:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 789.783847] netlink: 'syz-executor4': attribute type 39 has an invalid length. [ 790.297711] binder: 21271:21316 BC_FREE_BUFFER u0000000020001000 no match [ 790.304786] binder: 21271:21316 got transaction to context manager from process owning it [ 790.313172] binder: 21271:21316 transaction failed 29201/-22, size 0-0 line 2843 03:39:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:39:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1c000000}}}, 0xd8}, 0x1}, 0x0) 03:39:01 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:01 executing program 3: clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 790.438235] binder: undelivered TRANSACTION_ERROR: 29201 03:39:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000040)=0xd62f) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x2000000001, 0x2, &(0x7f00000000c0)=0x4}) 03:39:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="8a1b083f8cf4ff97d64cfcfa602be74ac977b2c69f646734ab1e1e431dd6994dd5d57eb0465d9abff8f7bb6419231874f3d2d460765f2a83689f1a8dfb377ac78d201c3b9278e0982b4007162b0c9519a41caaaeb5afdb78929a92810a04b22c0889c640856f0a848fd37bbea9fc8d5f44d8bcaff6134e674a0015ae7bb7e08032f174ae9e", 0x85, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) ioctl$SG_SET_DEBUG(r0, 0x5382, &(0x7f0000000080)) 03:39:01 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = dup(r0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r1) ioctl$TIOCSBRK(r1, 0x5427) [ 790.510485] binder: 21328:21330 ERROR: BC_REGISTER_LOOPER called without request 03:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1600}}}, 0xd8}, 0x1}, 0x0) 03:39:02 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:02 executing program 4: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x7f, 0x2800000000, 0x401, 0xffffffff, 0x9}, 0x14) poll(&(0x7f0000000240)=[{r0}, {r0, 0x26}, {r0, 0x1000}, {r0, 0x8}, {r0, 0x8000}], 0x5, 0x7) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f1, &(0x7f0000000300)={'veth1_to_bridge\x00', @ifru_map={0x9, 0x860, 0x0, 0x9, 0x3, 0x81}}) sendto$llc(r1, &(0x7f00000000c0)="2c5f51bb14500bdd4d88a85d685ed117ecf513252a151ca444309073c303da0acd29c1d231dceb403783550abf933afdc09b897aa77bdf1c4be7c6bcb9f73f06ce70c167e84d391a2389bdc6be652ca5b7d3cec3e4166eccd275e38dde4b0f0860c5161573986a18ec99b48afcfe04be00d8503eb27624", 0x77, 0x40000, &(0x7f0000000000)={0x1a, 0xfcf014321b3d789c, 0x100000001, 0x80, 0x7ff, 0x2, @random="3e3e470224c3"}, 0x10) ioctl$TIOCCBRK(r0, 0x5428) 03:39:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xc00000000000000}}}, 0xd8}, 0x1}, 0x0) 03:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="12ab7d56050473a3d6d0b01a9004496322f8812eebf8ff0334042ba944d2bdac3fc4062d0ac3433f8f711ff4aa0de549ec29ca6392529eb8a9b9db593583f91cf05f501e8b1714a529bd2a2c16e68197b3e551d676831207467dd3f7245a513d659aa79a044c727668dfb322efaea4216129e6e93491673b81bbb2c7dca1da80304908e0d0b0d8fc1168dc7ab98cbfaa69c8588058731078e5c238fe65dcfa16091efb8bef951765c235f9b8fad0301a715949ad1f44ce2f0fdb0bb61e4c00ac5284223d35d27f1595b203c347d1119d57b5bff17027193f0b757bc0c3277bb21698e85a1396e4b6356da8ac49b12899f09aef0b51238a45", 0xf8, r2) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 03:39:02 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000084fffc)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20040080}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000705000000fc0569421a9ff1420633c17eff3abdec00000000000020000300080007000002000014000200030000000000000076655f3000000000400001000800020001000000080002007790000008000b00736970000c20070010004cd916000000080002003c0000000800060006007f00fdffb01a7dd5e395d634277d0b01e79089dcf87086697fafe27a1a06dc4f1518c9e046c43e4d0488455c14d4d9f45eed28e6429880c7848a"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x40, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)) fcntl$addseals(r2, 0x409, 0x5) r4 = dup3(r2, r3, 0x400000000) utimensat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) [ 791.282960] binder: 21328:21388 BC_FREE_BUFFER u0000000020001000 no match [ 791.292554] binder: 21328:21388 got transaction to context manager from process owning it [ 791.300991] binder: 21328:21388 transaction failed 29201/-22, size 0-0 line 2843 03:39:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:39:02 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x9}) 03:39:02 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs#', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000200", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000), 0x1800) 03:39:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x40000000}}}, 0xd8}, 0x1}, 0x0) 03:39:02 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca71020848a5719a2b8f57f1ed56dec6e385dfb6d03d1f4e", 0x22}], 0x1, &(0x7f0000000140), 0x0, 0x20000000}, 0x0) 03:39:02 executing program 3: clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 791.417799] binder: undelivered TRANSACTION_ERROR: 29201 03:39:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9) ioctl$TCSBRK(r0, 0x5409, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x1, r1, r2, 0x100, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)={r4}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x101002, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000380)={0x0, 0xfffffffffffffffa, 0x13}) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0xfd, "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"}, &(0x7f0000000500)=0x121) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000540)=""/251) exit(0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000006c0)={0xa, &(0x7f0000000640)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000700)={r7, 0x2}) r8 = fcntl$getown(r0, 0x9) lseek(r0, 0x0, 0x0) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000740)) fcntl$lock(r3, 0x5, &(0x7f00000007c0)={0x3, 0x6, 0x80000001, 0x1, r8}) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x8) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000880)=0x3f, &(0x7f00000008c0)=0x1) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/139, 0x8b}], 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a00)={@in={{0x2, 0x4e24}}, 0x6, 0x8000, 0x3, "17e1c505964f86d2421e0b8fe7fc51dfe78fca9a69f258813c951d3496df65254734891a9c791dbbfae87001efcf5e8e7d6dcc90fe6a75c78ee3e7d208e55230c1196e7812d465bca656809ae7d89594"}, 0xd8) utime(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)={0x69b38c4a, 0x6}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000b80), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000bc0)={0x2, [0x0, 0x0]}, &(0x7f0000000c00)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000c40)=r9, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000c80)={r4, r5}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000cc0)={0x5, 0x2}) 03:39:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1d00}}}, 0xd8}, 0x1}, 0x0) 03:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:02 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000200000000"], 0x0) [ 791.506057] binder: 21412:21413 ERROR: BC_REGISTER_LOOPER called without request 03:39:03 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xa}}}, 0xd8}, 0x1}, 0x0) 03:39:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x600001, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r2, 0x4, 0x3, &(0x7f0000000100)="dc3f9726d2ccdbc8f44db54aa346d242b284e327ecd5ac3c921d092d67dc6269ebe972642f946dad3444f6b6f91a2706de20fc2a977f6644d8386037d7aeb4ce1411d0bfe5", 0x60, 0x8, 0x0, 0xb861, 0x7, 0x20, 0x800, "6b2abf2c765fb3db5494b4b6b4b99bc16ed88b0702babe7fb7d0b032d6277bec98619bf7b587717d0877b14567b3b6362632f29e9b7c6d29f957aac0e84f36aee6edeeaaceb51170e01f8464fa3e98fc5791959cd4ca8ceab4f28d5eb6b0d5483c72b2242ee2e7201ea7a41ec23832dffd253887a7dbc9501db6d7acfa0ef6298aadba"}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000002600), 0x8000, &(0x7f0000002700)) 03:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "0000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 792.301977] binder: 21412:21463 BC_FREE_BUFFER u0000000020001000 no match [ 792.309664] binder: 21412:21463 got transaction to context manager from process owning it [ 792.318141] binder: 21412:21463 transaction failed 29201/-22, size 0-0 line 2843 [ 792.366727] QAT: Invalid ioctl [ 792.379074] QAT: Invalid ioctl [ 792.413811] QAT: Invalid ioctl 03:39:03 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7cb2030000000000, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:39:03 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xd}}}, 0xd8}, 0x1}, 0x0) 03:39:03 executing program 3: clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:39:03 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x400005, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x40045730, &(0x7f0000000100)) pipe2(&(0x7f0000000240), 0x800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x400, 0xe3, "06dccb5f20ee45ee99aeacfc990cb5ce14d7431a6db0c2259d0706ff1c78ba8dc1be1bf46ad89f6e4272424d4c389c8287ccb1043328ea34fd8a4d0adbdab595b0da4862d33cf0c3af5731ee95baaa4c93272347665456809cfb525d42d9bf6eae9ac2ab4e08b2b3453cb02c83a47a1322120d6afbb39b24e7e51c5a04772fd0bb95ead787a26b4ec7f80c8340150d46aa006f4a8589377399679d5029c2988700567dbab1cb14f1cf989aff9803d6bb884098875d376595b4098127cccf98af2fb2751d1189eb8652f0a8181801ca1057dbbe058821138ceb860d2c323967dcf27701"}, 0xeb) renameat2(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x202c01, 0x24) 03:39:03 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) [ 792.436400] binder: undelivered TRANSACTION_ERROR: 29201 03:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 792.504465] binder: 21482:21485 ERROR: BC_REGISTER_LOOPER called without request [ 792.553422] QAT: Invalid ioctl [ 792.556709] QAT: Invalid ioctl [ 792.586047] QAT: Invalid ioctl 03:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="670f01cb0f017cad2e670fc769000f01d1baa000b8600eef2e67650fc71d76275968baf80c66b8f4f8768066efbafc0c66b846cc000066efb800088ed065f30f23622e0f09", 0x45}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 03:39:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x9}) 03:39:04 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x18}}}, 0xd8}, 0x1}, 0x0) 03:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000013000", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x19000000}}}, 0xd8}, 0x1}, 0x0) 03:39:04 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "00000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 793.296865] binder: 21482:21538 BC_FREE_BUFFER u0000000020001000 no match [ 793.304135] binder: 21482:21538 got transaction to context manager from process owning it [ 793.312593] binder: 21482:21538 transaction failed 29201/-22, size 0-0 line 2843 03:39:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="b0"}) r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xea0d, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0)}}}], 0x0, 0x0, &(0x7f0000000280)}) 03:39:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620b, 0x204f4000) 03:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:04 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) 03:39:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1b000000}}}, 0xd8}, 0x1}, 0x0) 03:39:04 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 793.431939] binder: undelivered TRANSACTION_ERROR: 29201 03:39:04 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x80000) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) 03:39:04 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000816000)) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) timer_gettime(0x0, &(0x7f00000015c0)) 03:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000001100", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="01", 0x1, r0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001940)="b3", 0x1, r1) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="ccc4", 0x2, r1) keyctl$update(0x2, r3, &(0x7f0000000780)="df02754689212dfc3e2acc26fdc3ff864813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895117054ac2f1c00ad642733d9f84eee66d20e0f2751e18774fc2227cbb60fc68b143963541844fe7d4199d50e69010000006164c8f3e1181e6d50986cd98a5c44ac0ec3755bae750fe9a073eadeb27eafcf10d82f9aa122e7dc2faed85adcd88ca30e07000000002d94defa187e48b89efbbbcc9b9a9aaffce4e9149e5d3aa299f97c682a404ef6b122", 0xc1) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r4, r3, r3}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f0000000280)={&(0x7f0000000080)={'tgr192-generic\x00'}, &(0x7f0000000340)="a6d8ab4fb61b4004bdf5b572366ef68919d83aa788d1ff9ad5f7c89beae864a749c4e7c2ae8e89ddb99e71a7af7b87ea8223", 0x32}) 03:39:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0xc00}}}, 0xd8}, 0x1}, 0x0) 03:39:05 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000000c0)) [ 793.545788] binder: 21557:21558 ERROR: BC_REGISTER_LOOPER called without request [ 793.657047] ================================================================== [ 793.664914] BUG: KASAN: slab-out-of-bounds in tgr192_final+0x4fe/0x560 [ 793.671585] Write of size 8 at addr ffff8801ccda4ca0 by task syz-executor5/21573 [ 793.679114] [ 793.680758] CPU: 0 PID: 21573 Comm: syz-executor5 Not tainted 4.17.0+ #105 [ 793.687777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.697133] Call Trace: [ 793.699738] dump_stack+0x1c9/0x2b4 [ 793.703388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 793.708584] ? printk+0xa7/0xcf [ 793.711876] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 793.716642] ? tgr192_final+0x4fe/0x560 [ 793.720630] print_address_description+0x6c/0x20b [ 793.725489] ? tgr192_final+0x4fe/0x560 [ 793.729554] kasan_report.cold.7+0x242/0x2fe [ 793.733981] __asan_report_store8_noabort+0x17/0x20 [ 793.739024] tgr192_final+0x4fe/0x560 [ 793.742850] crypto_shash_final+0x104/0x260 [ 793.747181] ? tgr192_update+0x520/0x520 [ 793.751264] __keyctl_dh_compute+0x1198/0x1be0 [ 793.755910] ? copy_overflow+0x30/0x30 [ 793.759813] ? save_stack+0xa9/0xd0 [ 793.763474] ? lock_release+0xa30/0xa30 [ 793.767460] ? check_same_owner+0x340/0x340 [ 793.771812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 793.777366] ? _copy_from_user+0xdf/0x150 [ 793.781553] keyctl_dh_compute+0xc5/0x11f [ 793.785713] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 793.790482] ? kzfree+0x28/0x30 [ 793.793786] __x64_sys_keyctl+0x12a/0x3b0 [ 793.797951] do_syscall_64+0x1b9/0x820 [ 793.801860] ? finish_task_switch+0x1d3/0x890 [ 793.806366] ? syscall_return_slowpath+0x5e0/0x5e0 [ 793.811303] ? syscall_return_slowpath+0x31d/0x5e0 [ 793.816245] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 793.821622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 793.826483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 793.831673] RIP: 0033:0x455b29 [ 793.834853] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.854361] RSP: 002b:00007fd4631e9c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 793.862080] RAX: ffffffffffffffda RBX: 00007fd4631ea6d4 RCX: 0000000000455b29 [ 793.869360] RDX: 0000000020001a00 RSI: 00000000200002c0 RDI: 0000000000000017 [ 793.876636] RBP: 000000000072bea0 R08: 0000000020000280 R09: 0000000000000000 [ 793.883914] R10: 000000000000009d R11: 0000000000000246 R12: 00000000ffffffff [ 793.891186] R13: 00000000004bfd31 R14: 00000000004ceb30 R15: 0000000000000000 [ 793.898471] [ 793.900095] Allocated by task 21573: [ 793.903817] save_stack+0x43/0xd0 [ 793.907272] kasan_kmalloc+0xc4/0xe0 [ 793.910983] __kmalloc+0x14e/0x760 [ 793.914965] __keyctl_dh_compute+0x1000/0x1be0 [ 793.919557] keyctl_dh_compute+0xc5/0x11f [ 793.923713] __x64_sys_keyctl+0x12a/0x3b0 [ 793.927888] do_syscall_64+0x1b9/0x820 [ 793.931782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 793.936967] [ 793.938598] Freed by task 17189: [ 793.941979] save_stack+0x43/0xd0 [ 793.945441] __kasan_slab_free+0x11a/0x170 [ 793.949884] kasan_slab_free+0xe/0x10 [ 793.953689] kfree+0xd9/0x260 03:39:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001440)=""/113, 0x71}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x4, &(0x7f0000001780)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000004000)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x201, 0x0, 0x0, {0x0, 0x0, {}, {0x1500}}}, 0xd8}, 0x1}, 0x0) 03:39:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000008800", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) 03:39:05 executing program 3: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x20e, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:39:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, "000000000000000000000007fffffe00", 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'sit0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1a8) [ 793.956796] free_kthread_struct+0xc7/0xf0 [ 793.961034] free_task+0x1ac/0x1f0 [ 793.964574] __put_task_struct+0x2e6/0x620 [ 793.968813] delayed_put_task_struct+0x37f/0x490 [ 793.973575] rcu_process_callbacks+0xed5/0x1850 [ 793.978256] __do_softirq+0x2e8/0xb17 [ 793.982050] [ 793.983683] The buggy address belongs to the object at ffff8801ccda4c00 [ 793.983683] which belongs to the cache kmalloc-192 of size 192 [ 793.996348] The buggy address is located 160 bytes inside of [ 793.996348] 192-byte region [ffff8801ccda4c00, ffff8801ccda4cc0) [ 794.008251] The buggy address belongs to the page: [ 794.013193] page:ffffea0007336900 count:1 mapcount:0 mapping:ffff8801da800040 index:0x0 [ 794.021351] flags: 0x2fffc0000000100(slab) [ 794.025588] raw: 02fffc0000000100 ffffea00073552c8 ffffea000749c408 ffff8801da800040 [ 794.033459] raw: 0000000000000000 ffff8801ccda4000 0000000100000010 0000000000000000 [ 794.041322] page dumped because: kasan: bad access detected [ 794.047017] [ 794.048635] Memory state around the buggy address: [ 794.053545] ffff8801ccda4b80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 794.060888] ffff8801ccda4c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.068226] >ffff8801ccda4c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 794.075567] ^ [ 794.079962] ffff8801ccda4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.087319] ffff8801ccda4d80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 794.094662] ================================================================== [ 794.101998] Disabling lock debugging due to kernel taint [ 794.107755] Kernel panic - not syncing: panic_on_warn set ... [ 794.107755] [ 794.115135] CPU: 0 PID: 21573 Comm: syz-executor5 Tainted: G B 4.17.0+ #105 [ 794.123528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.132869] Call Trace: [ 794.135447] dump_stack+0x1c9/0x2b4 [ 794.139061] ? dump_stack_print_info.cold.2+0x52/0x52 [ 794.144239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 794.149068] panic+0x238/0x4e7 [ 794.152243] ? add_taint.cold.5+0x16/0x16 [ 794.156373] ? do_raw_spin_unlock+0xa7/0x2f0 [ 794.160765] ? do_raw_spin_unlock+0xa7/0x2f0 [ 794.165164] ? tgr192_final+0x4fe/0x560 [ 794.169123] kasan_end_report+0x47/0x4f [ 794.173088] kasan_report.cold.7+0x76/0x2fe [ 794.177396] __asan_report_store8_noabort+0x17/0x20 [ 794.182393] tgr192_final+0x4fe/0x560 [ 794.186175] crypto_shash_final+0x104/0x260 [ 794.190476] ? tgr192_update+0x520/0x520 [ 794.194520] __keyctl_dh_compute+0x1198/0x1be0 [ 794.199098] ? copy_overflow+0x30/0x30 [ 794.202969] ? save_stack+0xa9/0xd0 [ 794.206602] ? lock_release+0xa30/0xa30 [ 794.210565] ? check_same_owner+0x340/0x340 [ 794.214876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 794.220485] ? _copy_from_user+0xdf/0x150 [ 794.224615] keyctl_dh_compute+0xc5/0x11f [ 794.228756] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 794.233494] ? kzfree+0x28/0x30 [ 794.236761] __x64_sys_keyctl+0x12a/0x3b0 [ 794.240892] do_syscall_64+0x1b9/0x820 [ 794.244758] ? finish_task_switch+0x1d3/0x890 [ 794.249234] ? syscall_return_slowpath+0x5e0/0x5e0 [ 794.254149] ? syscall_return_slowpath+0x31d/0x5e0 [ 794.259063] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 794.264409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 794.269234] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 794.274403] RIP: 0033:0x455b29 [ 794.278121] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.297679] RSP: 002b:00007fd4631e9c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 794.305370] RAX: ffffffffffffffda RBX: 00007fd4631ea6d4 RCX: 0000000000455b29 [ 794.312620] RDX: 0000000020001a00 RSI: 00000000200002c0 RDI: 0000000000000017 [ 794.319880] RBP: 000000000072bea0 R08: 0000000020000280 R09: 0000000000000000 [ 794.327130] R10: 000000000000009d R11: 0000000000000246 R12: 00000000ffffffff [ 794.334380] R13: 00000000004bfd31 R14: 00000000004ceb30 R15: 0000000000000000 [ 794.342091] Dumping ftrace buffer: [ 794.345610] (ftrace buffer empty) [ 794.349296] Kernel Offset: disabled [ 794.352909] Rebooting in 86400 seconds..