01, 0x8000000000}, {0xffff}, {0xffffffff, 0xb173}, {0x0, 0x1}, {0x2, 0xffffffffffff0000}, {0x5bc, 0x3}, {0x5, 0xfffffffffffffffa}], 0x2, 0x9d, 0xf, 0x2, 0x7}})
lseek(r0, 0x4000000, 0x0)

06:23:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="550000000f007f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  558.622044] binder: 25875:25879 ioctl 40046207 0 returned -16
[  558.628646] binder_alloc: 25875: binder_alloc_buf, no vma
[  558.651157] binder: 25875:25892 got transaction to invalid handle
06:23:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="55000000180f7f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  558.690600] binder: release 25875:25879 transaction 2314 out, still active
[  558.711233] binder: unexpected work type, 4, not freed
[  558.733958] binder: undelivered TRANSACTION_COMPLETE
06:23:05 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0})

06:23:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018fc7f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  558.756164] binder: release 25875:25879 transaction 2314 in, still active
06:23:05 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x400000000000)

06:23:05 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x20000, 0x0)
recvfrom$inet(r0, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x330)
r1 = socket$inet6(0xa, 0x3, 0x5)
accept(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80)
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
getpeername$llc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000240)=0x7f7d60d711ba66ad)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48)
write$P9_RSTAT(r2, &(0x7f00000004c0)={0x6b, 0x7d, 0x1, {0x0, 0x69, 0x6, 0xe2, {0x8e, 0x1, 0x5}, 0x400c0000, 0x4, 0x8, 0x145f017e, 0x1b, 'securityvmnet1eth1eth1#em1}', 0x0, "", 0x11, "76626f786e6574312e28c9637075736574", 0xa, '/dev/rtc0\x00'}}, 0x70)
exit(0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1b)

[  558.798896] binder: send failed reply for transaction 2314, target dead
06:23:05 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000420005010000000000000000000000000bbcd55e9af9589a2d482db2f7a93f3346ddbcbf69dfef85b1e035bddb0c3c49d65a75057abe36c2f64373ab95ed7426649f0c4a4a1e481676477230cb3cf608fb8f0bdff188191ad267120f63140d4f5ad5ea9a6449da6c7ba3bd20a81faf898cee0641d81722"], 0x14}}, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000004c0)=""/164, 0xa4}], 0x7)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r3 = dup(0xffffffffffffffff)
getpeername$llc(r2, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000640)=0x10)
r4 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
add_key(&(0x7f0000000c80)='dns_resolver\x00', &(0x7f0000000f40)={'syz', 0x0}, &(0x7f0000002e80)="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", 0x1000, r4)
quotactl(0x1, &(0x7f0000000ac0)='./file0\x00', r5, &(0x7f0000000e80)="0d025290dac21fd2bed1b499c258deac4a0e1afaf72462c3983aeafc39b6bece016fb8dfffacf9b9381e6244cfb49c21ac8d7f07b69b7e02e2cb196941ac81c3295aa8381f26959a7da48e101df3ea9e92540fea086eb03cb0cd3fa7b03e90c97f3fb0ea256742fcf6c3c8275629285b19c07943b56dd69eefb678eb35c8fc783dccf65b1a446e5f823332b0f6dcd7cb1fca3fece412412cacc2f74ead91e1a1093c62bde5fd012652dcbc9ad1d565c16fba2a620fa73957")
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000dc0)=0xe8)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00')
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000980)={0x0, @data})
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="66302abd7000ffdbdf25090000002c0009000800020003000000080001009a000000080002001f00000008000200080000000800020002000000240007000c000300e84d00000000000008000200070000000c0003007f0000000000000008000200040004007800050008000100756470000800010069620000540002000800010015000000080003000200000008000300200000000800020006000000080003000600000008000300000000000800010014000000080001000b0000000800030083000000080001000400000008000100696200000800010075647000"], 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x4044004)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000a40)={[{0x7f, 0x9, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8, 0x937, 0x8, 0x9, 0x100000001, 0x7fff}, {0x401, 0x101, 0x13e67830, 0xfffffffffffffe00, 0x4, 0x1, 0x5, 0x4, 0x2, 0x25b0, 0x8, 0x55, 0x80}, {0x5, 0x3f, 0x8, 0x3f, 0x1, 0x10001, 0x2, 0x43b, 0xaa89, 0x8000, 0x9258, 0x9, 0xffffffffffff7fff}], 0xe63})
syz_mount_image$hfs(&(0x7f0000000800)='hfs\x00', &(0x7f0000000840)='./file0\x00', 0x9, 0x1, &(0x7f0000000c40)=[{&(0x7f0000000880)="6b5471d27b4073bffd7f9212abdf4934573a01a6bac174e0682819f825716b367df7a514875ac54862326cfa42b9163951a0797b07b66ad704d04ecb15984de349d72991be59ffbc6d88ccadcefae1dd8cfc0f280e20b082128c50f1a55d18b394643300aff1840da10a00e4ea07", 0x6e, 0x2}], 0x80400, &(0x7f0000000e00)={[{@type={'type', 0x3d, "7fcde92c"}}, {@quiet='quiet'}, {@codepage={'codepage', 0x3d, 'cp950'}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, "76626f786e6574312f3aa25e2b27"}}]})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040))

[  558.842704] binder_alloc: binder_alloc_mmap_handler: 25908 20001000-20004000 already mapped failed -16
06:23:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018037f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:05 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0)
connect$bt_rfcomm(r2, &(0x7f0000000280)={0x1f, {0x1f, 0xdd46, 0x3, 0x1, 0xffffffffffffffff, 0x80}, 0x1}, 0xa)
mq_notify(r2, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000040)="1e1571343b735b32e06c152c40d72a7bb4ea119ee4ff3413ee938376e72e158342a375201ccbc32965e1cdbcbf6770efa90be2ffdb4a016fc459a904163d9c86303ee2e971f44e40461549b02ee47a18eb77274cc3722afb5aebe8503a98caec3888", &(0x7f00000000c0)="a38cfb1e0b450b9127cb8a34080558eb9076c83775732361b34134f762a45b703bf80e202b4f652ae7815e8868d6d963e5d8e90b390df930e7c5bb96f00b4192dd272b242100ef1c55d07b7a6dbcb068e56abb029a5ebee01573edd71d2cbf4c08264b0f44fd732e5abf0a2df526e86198daf788838fea6c27a4bb0ebc206d5bb3032749c7efc4fba47d7b2566fc869b5dbd81fb308942bd0963b87938f343decfd80f41af09d5dc2468705c780f56281dc78fb5a24d912119616af511797b32dd47c2b41bdb51f35b46ce488b1a9771"}})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x5, 0x7fff, 0x202, 0x9, 0x7, 0xfff, 0x1644, 0xb3d, <r3=>0x0}, &(0x7f00000005c0)=0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000600)={r3, 0x7ff, 0x2, 0x3, 0x101}, &(0x7f0000000640)=0x14)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10011, r0, 0x4)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x101000, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={<r5=>0x0, 0x74, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @loopback}, 0x38d6}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x3f, @remote, 0x5f}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local, 0x8208}]}, &(0x7f0000000400)=0x10)
setxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x4}, 0x28, 0x2)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000440)={r5, 0x1}, 0x8)
recvfrom$unix(r2, &(0x7f0000000200)=""/90, 0x5a, 0x40000140, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x400, 0x0)

[  558.884479] binder: BINDER_SET_CONTEXT_MGR already set
[  558.890790] binder: 25908:25909 ioctl 40046207 0 returned -16
[  558.910185] binder_alloc: 25908: binder_alloc_buf, no vma
[  558.948807] binder: release 25908:25909 transaction 2321 in, still active
[  558.963410] binder: send failed reply for transaction 2321 to 25908:25909
06:23:05 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="ea496c2240c5331b5d742834ab97816375c32b9a9ce67d38458bb5bca8addaaea4e763cd365d0a28650afabd4d8c73477ef4307548cd9383fb692d624f79ccf75b5e76c99264f8a39ab0244976ad43c21c13752e42457b26f5476c5f8b41e39c2cff", 0x62, 0x40041, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180), 0x2b2, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404001"], 0x31e, 0x0, 0x0})
ioctl(r1, 0x8, &(0x7f00000001c0)="d158567d8d39fb43eacb799c4abf940ee620ab03764ed3cf3d365816236f2144946b0d1c1755316e754a3e473f1e7a61eadcecd11481235f60ca6ba7aae45142c73054908dc2ad8edb817fe6c5452bbda221cbfcd5e952f09e9a9b1e0ecb616907f93b5ddd4784a11b4633d130b218a6f5d0bdac3b412d820bdf18cf160e56e3e10ed0a7780338c5de0bc28875c0655e45969c48b1c70ef32bafea47194e2e0263e16b94ba04dd9ad72fd339010e916241fb648e411f2696a87e44a90e15e38fd035caaffcc0018ae1e72523c9ace39a3fca33bf156bf8bc86ac39eae379")

[  558.994221] binder: undelivered TRANSACTION_COMPLETE
[  559.073106] binder: 25937:25939 ioctl c0306201 200000c0 returned -14
06:23:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018137f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:06 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x20, 0x101000)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x401)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={<r4=>r2})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
ioctl$RTC_AIE_OFF(r4, 0x7002)

06:23:06 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x20000000000000)

06:23:06 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000420005010000000000000000000000000bbcd55e9af9589a2d482db2f7a93f3346ddbcbf69dfef85b1e035bddb0c3c49d65a75057abe36c2f64373ab95ed7426649f0c4a4a1e481676477230cb3cf608fb8f0bdff188191ad267120f63140d4f5ad5ea9a6449da6c7ba3bd20a81faf898cee0641d81722"], 0x14}}, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000004c0)=""/164, 0xa4}], 0x7)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
r3 = dup(0xffffffffffffffff)
getpeername$llc(r2, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000640)=0x10)
r4 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
add_key(&(0x7f0000000c80)='dns_resolver\x00', &(0x7f0000000f40)={'syz', 0x0}, &(0x7f0000002e80)="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", 0x1000, r4)
quotactl(0x1, &(0x7f0000000ac0)='./file0\x00', r5, &(0x7f0000000e80)="0d025290dac21fd2bed1b499c258deac4a0e1afaf72462c3983aeafc39b6bece016fb8dfffacf9b9381e6244cfb49c21ac8d7f07b69b7e02e2cb196941ac81c3295aa8381f26959a7da48e101df3ea9e92540fea086eb03cb0cd3fa7b03e90c97f3fb0ea256742fcf6c3c8275629285b19c07943b56dd69eefb678eb35c8fc783dccf65b1a446e5f823332b0f6dcd7cb1fca3fece412412cacc2f74ead91e1a1093c62bde5fd012652dcbc9ad1d565c16fba2a620fa73957")
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000dc0)=0xe8)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00')
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000980)={0x0, @data})
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="66302abd7000ffdbdf25090000002c0009000800020003000000080001009a000000080002001f00000008000200080000000800020002000000240007000c000300e84d00000000000008000200070000000c0003007f0000000000000008000200040004007800050008000100756470000800010069620000540002000800010015000000080003000200000008000300200000000800020006000000080003000600000008000300000000000800010014000000080001000b0000000800030083000000080001000400000008000100696200000800010075647000"], 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x4044004)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000a40)={[{0x7f, 0x9, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8, 0x937, 0x8, 0x9, 0x100000001, 0x7fff}, {0x401, 0x101, 0x13e67830, 0xfffffffffffffe00, 0x4, 0x1, 0x5, 0x4, 0x2, 0x25b0, 0x8, 0x55, 0x80}, {0x5, 0x3f, 0x8, 0x3f, 0x1, 0x10001, 0x2, 0x43b, 0xaa89, 0x8000, 0x9258, 0x9, 0xffffffffffff7fff}], 0xe63})
syz_mount_image$hfs(&(0x7f0000000800)='hfs\x00', &(0x7f0000000840)='./file0\x00', 0x9, 0x1, &(0x7f0000000c40)=[{&(0x7f0000000880)="6b5471d27b4073bffd7f9212abdf4934573a01a6bac174e0682819f825716b367df7a514875ac54862326cfa42b9163951a0797b07b66ad704d04ecb15984de349d72991be59ffbc6d88ccadcefae1dd8cfc0f280e20b082128c50f1a55d18b394643300aff1840da10a00e4ea07", 0x6e, 0x2}], 0x80400, &(0x7f0000000e00)={[{@type={'type', 0x3d, "7fcde92c"}}, {@quiet='quiet'}, {@codepage={'codepage', 0x3d, 'cp950'}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, "76626f786e6574312f3aa25e2b27"}}]})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040))

[  559.147905] binder: 25937:25948 got transaction to invalid handle
[  559.154309] binder: 25937:25948 ioctl c0306201 20000100 returned -14
[  559.166955] binder: 25937:25948 ioctl 8 200001c0 returned -22
06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018607f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:06 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20000011, r1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @empty}}, 0x7fffffff, 0x9}, &(0x7f0000000140)=0x90)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, r1, 0x0, 0x20, &(0x7f0000000180)='posix_acl_accessmime_type&!ppp1\x00', 0xffffffffffffffff}, 0x30)
prctl$PR_SET_PTRACER(0x59616d61, r3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018047f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:06 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x400000000000000)

06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018067f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:06 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x240000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x200, @ipv4={[], [], @multicast1}, 0x400}, {0xa, 0x4e23, 0xffff, @ipv4={[], [], @loopback}, 0x2}, 0x200, [0x7, 0xcd, 0x3, 0x1, 0x4638, 0xc5, 0xffffffffffff90c7]}, 0x5c)
write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x20)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0xffffffff, 0x12)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:06 executing program 2:
r0 = socket$l2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000100)={'bcsf0\x00', 0x5})
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000140)=""/248, &(0x7f0000000240)=0xf8)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000280)=0x3f)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$bt_hci(r2, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x800)

06:23:06 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x3000000)

06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018127f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:23:06 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x3, 0x5, &(0x7f0000000040)=0x8000})

[  559.856407] binder_alloc: binder_alloc_mmap_handler: 25937 20001000-20004000 already mapped failed -16
[  559.866363] binder: BINDER_SET_CONTEXT_MGR already set
[  559.871738] binder: 25937:25991 ioctl c0306201 200000c0 returned -14
[  559.878325] binder: 25937:25948 ioctl 40046207 0 returned -16
[  559.884613] binder: 25937:25992 got transaction to invalid handle
[  559.890961] binder: 25937:25992 ioctl c0306201 20000100 returned -14
[  559.928269] binder_alloc: 25995: binder_alloc_buf, no vma
[  559.943136] binder_alloc: binder_alloc_mmap_handler: 25995 20001000-20004000 already mapped failed -16
[  559.954142] binder: BINDER_SET_CONTEXT_MGR already set
[  559.961926] binder: 25995:26001 ioctl 40046207 0 returned -16
06:23:06 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x8000)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{}, {}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff97, 0x0, 0x0, 0xe4ffffff}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0xffffffffffffffff, 0xc3, &(0x7f0000000000)=""/195}, 0x48)
fadvise64(r1, 0x0, 0xfff, 0x5)

06:23:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018077f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  559.982565] binder_alloc: 25995: binder_alloc_buf, no vma
06:23:06 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  560.028827] binder: release 25995:25996 transaction 2329 out, still active
[  560.056587] binder: unexpected work type, 4, not freed
06:23:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
socket$inet(0x2, 0x5, 0xffffffff00000000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x26000, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f00000001c0), 0x10, &(0x7f0000000440)={&(0x7f0000000380)={0x6, 0x0, 0x2, {r3, r4/1000+30000}, {0x77359400}, {0x3, 0xfffffffffffffffc, 0xf41, 0x8}, 0x1, @can={{0x0, 0x3b8, 0x3, 0x80000001}, 0x0, 0x1, 0x0, 0x0, "18e758011879c4b3"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000180)={0x5, 0x6, 0x4, 0x68f, '\x00', 0x3})

[  560.077754] binder: undelivered TRANSACTION_COMPLETE
06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018057f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  560.100381] binder: release 25995:25996 transaction 2329 in, still active
[  560.117213] binder: send failed reply for transaction 2329, target dead
[  560.127453] binder_alloc: 26021: binder_alloc_buf, no vma
[  560.137205] binder_alloc: binder_alloc_mmap_handler: 26021 20001000-20004000 already mapped failed -16
06:23:07 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x3, 0x5, &(0x7f0000000040)=0x8000})

06:23:07 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x3)

[  560.151601] binder: BINDER_SET_CONTEXT_MGR already set
[  560.169043] binder: 26021:26023 ioctl 40046207 0 returned -16
06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018097f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:07 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x80)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

[  560.232695] binder: 26021:26022 got transaction to invalid handle
[  560.255007] binder: release 26021:26022 transaction 2335 in, still active
[  560.268427] binder: send failed reply for transaction 2335 to 26021:26022
06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="55000000180a7f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  560.303529] binder_release_work: 22 callbacks suppressed
[  560.303536] binder: undelivered TRANSACTION_ERROR: 29189
[  560.324768] binder: undelivered TRANSACTION_ERROR: 29201
[  560.338562] binder: undelivered TRANSACTION_COMPLETE
[  560.354574] binder: undelivered TRANSACTION_ERROR: 29189
06:23:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:23:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x80040, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001580), &(0x7f00000015c0)=0x4)

06:23:07 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x3, 0x5, &(0x7f0000000040)=0x8000})

06:23:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="55000000180b7f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:07 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x1000000000000)

06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018087f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  560.514412] binder_alloc: binder_alloc_mmap_handler: 26054 20001000-20004000 already mapped failed -16
[  560.524433] binder: BINDER_SET_CONTEXT_MGR already set
[  560.530129] binder: 26054:26060 ioctl 40046207 0 returned -16
[  560.537624] binder: 26054:26064 got transaction to invalid handle
[  560.548086] binder: undelivered TRANSACTION_ERROR: 29201
[  560.554035] binder: undelivered TRANSACTION_ERROR: 29189
06:23:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x400, 0x40)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000480))
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000280)=0x10001)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200))
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x10001, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r4 = accept$alg(r2, 0x0, 0x0)
mount$9p_rdma(&(0x7f0000001240)='127.0.0.1\x00', &(0x7f0000001280)='./file0\x00', &(0x7f0000001380)='9p\x00', 0x80400, &(0x7f00000013c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x1}}, {@sq={'sq', 0x3d, 0x7fff}}, {@timeout={'timeout', 0x3d, 0x3f}}, {@rq={'rq', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, 'wlan0wlan1ppp0em0^ppp1em1em0'}}, {@obj_user={'obj_user', 0x3d, '/dev/amidi#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'selinuxwlan1'}}]}})
sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001200)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000680)="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")
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8)
sendto(r3, &(0x7f0000000780)="fa6ca2b94d5a83c6fd9400ab264280038f00a8107248b8bb787b9dc6033627e6f14c278b381e9e46548d2a672a9f89712abf2d1717cb0a41012f2761b99a0969a6dc227d4ff1e3f22605ed47300a747b95024754a8d066f5a1f10286d866cf4ff6e2684ccb5c8918fba3201a2929a0b8ef67cf073b04315f8fb181633cf00604434639b580dff98182d0b5e56ada5b66c60d53d8e10ff10c077306e916c1a864997db39bbb481787a74432b0a701a1f658331c632a6542563d4cd1b09c7d0d0d1ecb16fa9401b9455def44b4dc673ed6c88b652dfd17cdd4fc16b4e8d7fe119cbe7799bdb207385f51b4218a252f22e30d574ba97a4b38da0b6d4cb334560a490064d8eeffc2c36e1362c7b5ca391b8db8bfac07373948443e6779cb4e2e844fee54978477600135063305dbc181d490262dea0b8ea66b8e31abba6ae3e61292535570ddf66e40412b32f12955f1b5bf7e3eea6c6c04431be30dd30e4841cca9f33ab225fba2e31baa8be39b0299d838a6e2fe4adace991d9c5bc4365bf36343e98a9c598a34385cc46fe5f3110095ce0f17ffc3f7a7e0b9e005fd61861a5bdb76005f6746cb41aa3aaa3183087ffad858096233449de09ddc1ab7dea72f7143ae8f7fda180896ea1cdda43a5ed909de4e8b732f07c9440b83957670cf8922df7696a38ac1994298bd90f3e90e8347f07363c2c9a4deea67f740a1ec87a783a3ece3f53cbcbacb1ee43043a7753686e89a8bed7ddec800249bb30773df412239724aeba750a5e1b77df30af01c7ed923bf2ba3f785c4c0306749b9c0a8328a88526fcefd1d3f79915d668c2f81119b4c3bcd532848409e05b55de59b4c4913af2c20f837c6f0cb41afe3b9f951c8455baa9c4a256db45d5c964852e6d12a7fc985cd6d37697914edabc7c2efd6e4648e0317a1b32495763a8cebd19f8e1a693baa31944fb5da9a07bfce4c2d6bfb95f1debe550838adc0e29b3c300aead7cff0bac0552e90cdb6dc40fc35e10747e860ab7d97bbde4a67259b9d40e02b64dd4c258841f30e004bc7dc387be14a2befe8edca6e849ab2a54a0bc37a0aaab6e8e06d27ff7e11bc6592ab29f149ed299ddcd7084620a1ff11096ab5e0df258344a5b4b186827e980e5e13df68e4da1e18eac4d878e9be1d79decd31dbe2ef2d1b979b58e856ffbe2412e489d3dfefca1597e09e184948561985feaa19c0868b5a9bb014bc52ea0caeb1677c13afd467d6cb6fd8282f710f340aa828af0728d51833b04121c2856ee964909c231368a6bba6f76fd9fbddd40846986531a6d5e877b8e473f4982165d6a16d7d15279143dae77a959d0153f8f67e1592dc946f37a5892b90e350aa1cc86a6e7ed833a4c21075d2b90b30fc2aeb5337053391d46b8bd1ea47d722ef17a72b95819152e1c033ed64244c389beeb92bccd99902fba50666e94c32b44fdb5ce0f43c478389a58e40ead05b431bf25a41ac630898785f6c4c6b57e35f2837e92de60eef3eb92e61923028e18d4bc3a491f48a4f376dfdfd8f806763398201b6376fc11bea66361d8ffb5d228d34e9261c5285755b87726e027ad5dad5031475fdb541518ff70c74f5279e919b1beb314a656feff2f1f6a149165a8078d453c7b2fdb319cb8602f9d85e5439a787469f51ae4a5ccb46f22e0e15c56df73a576565ac2595b3b77135b385379c3dd8bf6a8bff52186171a4f3060872cd64f11f39a561ce8c2e5db4934f2576b5500508795eb2c065a95e238c964340f074a91117961afaf5097539fa8ee88bfafcb76651331766201f6c4afcde1ef874011336f678f9180705fd9097e5243e556b6110bef81d2447315b5995490140feeb11d2ce9b3ee2450fe060bf18ca0212c2aa8f5c84cb27ef1ba3977b861b711bef8d978a80ca706b99625de6eb5aefecfdec284bc1fbe9cbc5a04e168bb6fadc334a997cd24543ce6384244e460ac1f67bd4151ddfb2952176123cb228a7ad2010342a4a4429cd53ca1009e165228e433e964e3295e3d99508f9a199953147aa3865ac5883da822a4c965b8a0ead2d0fb54e54dc630fc5e51b3e120de5c7428986498771d2081201edc9476f62df31a13e742629e2ce11d5b50475e8449047393bbfee6d09fad6d4ce5019ca83061d3bce48b157b0fb4ca0cbf2edf1de02dc241b618d08beb02c8eb26347327674bcfac8fa09b40b0bd6ad763da21ac375078fff872a7b2c77f558ebf46bcf68020c70fb15fc2506a17173197a6b32aa5fa12502d951bbf2065d79d1dbd784dfab67aab7de46c2575a6472673f69c3cf388ca43bd949083ffe426c556a2f8f015b113ef726a4db28354ddc47c3f171ba9dee211eb3bd4203eea2d4dba574cee350883a6cd3d8bc3ecf7905c0c80e9962cd86c8c6404c85a156fec3fc3e163195f353d5df228bc8ab0950ddb1be055d05e4870213c9c35192a56154dd28b307348459dda5727bd1d641f805f2e46a9186bd5fa976923bd82696e7dc5cb7fd4d4798c9eec1815e3f1b5457a21ac17f28e04973157625ae1703d590ff573c27a077159e19fcdbcb190710c98eff56564e3be94121ebe734ae16d997050a2bd1f13f392b58940800882decdc9fb60f800212a9f2801a0c2d934000967be95374fa1b36599edc682b84d358277de61bd8b6a3d81f68bdedd4bfbc70616970f8d64ee70e8df7054c974125644574c7af007890415afd4fcaf43f190b7a5dbda882093bbdb0b0cbae10420d2bdebe787221faea556c78c8035e5986ae3a13681eaefaf351b983b4ee8b0d818b22c4634a55a2e78fcf871f789e5d0eefd7b462d50d4b68c7db03d728e7a30428c7d86719dadcaee2a56a12cfbcbffba395c316fcc6d0b414", 0x7f1, 0x8014, &(0x7f0000001780)=@ll={0x11, 0xf6}, 0x80)
syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xffffffffffff9e64, 0x0)
recvfrom$packet(r1, &(0x7f0000001800)=""/4096, 0x1000, 0x40000000, &(0x7f0000000380)={0x11, 0x17, r5, 0x1, 0xff, 0x6, @remote}, 0x14)
syz_mount_image$hfsplus(&(0x7f0000000400)='hfsplus\x00', &(0x7f0000000440)='./file0\x00', 0x3, 0x7, &(0x7f0000001140)=[{&(0x7f00000004c0)="db18125da7bd8e573e6af6d4c78e89da5a97d5ea3c8ccd8796b855bd4681b12c62cd7646153404b173e55ebe1ab2580377370277095df3043a0e35fd67be508855c3c1b1ddfdc6f9f7b560b7c0f887657efa1dd58e5adcf553e1616065c65ddecfbbc7", 0x63, 0x101}, {&(0x7f0000000540)="80f63ebc20b4069f625e5c8cd8750d73338a494e8545e1316e5582cbcf19e2c18621eccdde16ff2e4965d731d306379750bc13a9559143", 0x37, 0xb40}, {&(0x7f0000000f80)="a6ef5803219870faf20d6691a887ba427a20592be4e031", 0x17, 0xfffffffffffffffa}, {&(0x7f0000000fc0)="552ee24c36976f16e322f3daa41910aab550ed8b87b3d4ec4c10b589f5a45e5a0e8d681ac6c370bcce03251aa5df58582ff7e0e0a931d21d454075485823a436a708154f563af478969a4f935e74537a82ff14e5f633c13b183d184a05b9ccb513647c3f66759b2892653e319e1acf3e9727b37e", 0x74, 0x6}, {&(0x7f0000001040)="01ddc2a9634f4ef2b46778b386e7c4803556bd00019d7361e94296c86a1646f7000b004a9d6b1250d66b90f84cbe1b2404d1f6e9753c5e61552a4e09583dc340e0e957782e54760cd7fa6f45125768007ba8", 0x52, 0x48}, {&(0x7f00000010c0)="b1db38e722ab2b620c90d22d5f8865b292eb3f37b414af49544011226daea7fe7cae76707b334accd7c3bcc2d125731648106d2ee1bb633bf1c1cda3eb64ea1979db115fd99e4dee0150ae4256c97259df866f38a1c7a1dca64687a7a10f8db960f576b86caeca73afcacd4323fbf6e99ce04d0faa3b", 0x76, 0x7ff}, {&(0x7f0000002800)="89c4a6821e1cce843639b4724508c1fd52432bdb7f11ff3ae91fa7d0b1c6933cef9edcf85c621ad8c3e442ccb644e32b43f58baa2251b444d57b75db7db2cecc79d55b44761bbe9f4c92c78f264dbc81178005f6e3ce8db860bd911f1c3fb3a4e2d60e80c2cd97e92fb404289561d88c2cc513b630c87aee1f55e0eca5fe629bbb2123101e62f73009ec6df94f898050c64c3f3515dd758c8cc372572f0b2e442c54cbe73440250cb980d53650de8d62ae9ede0cd2fd54a8583f0a4e0611566b5547b666f0fab1d445fd77e3ba71ca7be948c241e990aca48485520dc2ebac5bb5526dae00e2d46267bbbded7700a53025295ae8831ffd56522ef144ed9d4fe0d71bfc2284d41e07d20830ce058f99a599a0a7c976f8c1e794e1ee0560d09075d23f903c910807a398442d3539cc8d57acab6ddf1e7708fa301b143aad97ed14fd603acb1f6baad7e80b227ef0cc0908c1f16bf693097a32f3c715c6a40c44f0425398420f2dd4478415d0f59b5ca5283f0b6974bef36bb2b86e4c2bdb138ba32e2ea92c0831a53d9883a42fdf5966da4e4208e79053b9b4310a89e05b39cb16193062862c15e875d72a2e85a70677bf3d7812e60c38111cf62fbd3398a608dc6c07dba24cb2e7ab218693815bde0cc6b0689e1f666ba3e68146c59be4111a402cc480aa6394bb0fb114577f6c4b505eeda192a56215921eb7a8ccdf5a25a8a4acd3a0cb63b66ac92e16eab41613106528e7882b04403759f893d6d3b96979b31e75b206a21545afe9e58f315c2942e95459afc8dd59aae44adfcbd4d7485947b7a222264bcc427ba9fae8585da88ed6b1dead4a755b073eb2882e66e1fef693cc67748a13618db16ca7395acf650a96346e2e17540e68bd662ce682bc2f9994c71b03c6d7d8cb2e97fb3b036fbe3fcf99bad8cc7dbc767bb80e5e22e1ad25dfb0aa867f034ff20546f89ab02d18bae2961e274554bace483368494bc45baa5a964cf9d4b4a42141d0fa575295713335a27fbd0b6ac7a1060101723880bd79c7e7d379bc825d9cadd2ee4015246462e08d6cfa9587d82148d2236c878a9b8f7cb2b888c6e688214b9f8cde1dbee88756428be072c8b75fc2083964f1c66d7e66acdf4e7826b5147d567077904483e463fbe1b69b964fb9ca343bf2521c0884f83cc207afabb2bc129f08cc42d47c797e71128aa645492394a99b3fd6f5ac8965f2ad01321e9362d946e25633f57aa390337331ea82d44822925bac992b5fdaddd6c4aac0205cb201019461204e4a86464034fb213ddfd3fc4aab35e89b5dd33d30d386f83727945f86db8c4feeebb6e6d11ca019887e81e6cc5bbf3ebd7108fc352e6137732901535e035ee5a76a83ea65ffc0b7c71f57dab01d253366211461634bacc63d1005398aa5305291e698c80aefbb0a103b11cdb75cce9c4ff07a7b11eff326ab6f4ef87300a8138e025acdf5c49f95fff8a4187b5dc077c3c7c4f45d1e2d2d24b06380489cbabfcfd2332fce4bfeb4e4ca9b96c41c0b5ca25ec411277b8c192f525e6bde8cba5e9d6d677199ce686ac43dd073ba6ce827677d20265211deed5daf1252ab944f56ea0611b14d7ad9057256ed5b6d1db60f9c6f2ec205e579d4ffc8843107228c09c36e492f36858d8819ca40fde0cc683969a7913de8635b46ee7f5a7cf6330493912934841bde1efb543e6546e7b4416e4de57e824e45a6b37b162fee8d06b68ea3c7083c6a6446b645dbe6687f45861b1441ff4b0669c59790934eeed6eb2095f2a5f0ad1c3c182983b38bbe47e8c81200b7c64872906fbf59034158c5510cfbb409d3119a393448e179b88161bc4c6d6e395cf019ee98533920397512d3b056e8f6fc66741b2a98f5c5b76482bbd43a7d499a1a024708801180776e84043230c0043f517e221113f2509b308f4a1445f92de9192a22954ff3e6897000998aa60fefd363b13283a6a4bd721b8b0f8515c4686cbe919bf3ffbb87d343cbe4aefa9381d229a3bc811023b992b86dfa74a911476785f23d34383bd5dde005ad0f3db5e22602507209a08f12140317360af93f1a8e26321d103d8fb618ac293ee737e9f076b2f67f302988c339c24a3aa0e1ee7ea4de0115246612f8dce7fce165d5659a873f80018b0376638f999a0cd4bbf3c5e22181a2344f5117131299d438b6fdb69d976412aaf73ddbe90eb4858fc96dbd06093ffc70a871e2cc1785c0a1f4d7f223c1f0d9a6607290fbe99338061678fc585fb220e167a8faff410ab20d66211511a40abe5218bc234d2eca52a181203b8051407148bd8241490e31385ea24754fadfdec9b7944798fe04cdc0104e6dd3e43181df60a757073ebbb745cf55e7f8973b0a8f4fd7c9561d9760d74050595792faa430d5b063812471452858121678b900545ba8f9760c49974dedd476bad60878132e606750a264bf98668df40051ccdba10b2283937c1286c9df4e84a617b27c986f532ff10cf541e4d643634f37aeda648e9e3e3153f5bcb4651acf7cf6d870a3db487983d1e086cc9e9f65e52749feff9f9e888eb75efac6db42859c7b38ecdd0bc6250e6dc976146a14339176f9716d86b2b683574b4c5c0cdbb635d63e2a2ab67137f4c17ed1d5b4cdf8bc69aa749bca4a641b34b8472ad2c40e1de75d8335797dab1bfd7b1380d74e558bf34d1b8a75ba2a363bc2abcb7ea5cddba44413cd771cf0b5800e10d77d17f844693a584cab78556d0e6bc0768b804d9e82139a831210615840c5a29c9207015599a9101cb643c801feb2b4bb596d51400092e423eaaa9be0ff7c4931d794e3668e39baaa96d50524c3bdefcf1d7c525c6d0f5d77950bdd0b67c0dd6a77dae10579405638198077e983c5623b587f55abb7bda01899c7d9140e34fb6ac3a2d0b2a2f928e3ad7cd88c97d5f7bdd698de80744e7b1b0fdc2d3fa6648739ae122c76122e2e6c0d344ee9482f13b1b54b02b13555fb8792ecc4af5f3f472ec2e14150bc16be2bb6b9e89b835a19ddaa6fc1be9e8a2b17d0199b7c2e46521c6288c1c4bb7ec296df71bb87040b2f9810a1bc1291fc8c17fa1d2b0d0352486b6d727cc0ff6535ed73d88f81b06aa149de938ff59dc9ec782d13204f6c4f757284f1a262af261e58d52bcd84a56f90f53d14283dd5eae9826573c6094b0de4ec1afcb5a53adf71addb7ff233de03490a412502b74abfbb9a0b3e2c0d627e74359f72644af4a819edc66cd43428ff21b4abc834399873e5860ecae3f90ef40a8a936b95ce65b812fcc1923de55da581e83e3a5da6bb1a0c574314cc7bf0576d5e4aca982f4d4fef873e9370aa522c2e668732b943298ec69ebf3d255bdf8914eaf5189b3a5f10b98925d11e18a41cf3ac48915d38292cb99a74303db97b0927b77c1055e8089d89cbb559a853da290d2e5fe8243dfda75bcd5d058029507b209aac4433320c036a13c9b1a0835850ae544723a752fe2990ec5eaacc510082405517d74ff89f1265b7c2922e5508b4794837920f89c0335b98d58047ca00b9f06843939f1c8af1745f3c8faa01ccf6d96291e8d759ea4eace8cacb347341efdbc7213a6a6bf1a20c671260ab3a7922f500b6ec11e65d8f2b2cfe28c415facb9cb4bcad1dcde2a8909bcad6cbe2abc2b064f8e5ab956149dbfca65c723c61a7d6597c22a0ecdf75c5a22c48388f38e0278bdb9c27063fabc784921c9ed86b2f97a641693732837fc6df1f3726a92041c46c6a4ac452f800295251fee52c4c9f86b64f18430031520f66164cbcd48f72c7fe505b90c93784b999a8e3994fb86162bb418b5f366b2b136901aceec859642dd6e5aff56988078afd008e6000c29f7e713588746368bd5546a647454fac1960eac5d895ee82cb2935d15e0e5d9c5bd0dcd0f857ca0883ca3b0991074bd63051000900a6311917096f7d689dae54146146d50da8d7bf203c20c1594de5dee338b95bb12f0835de1b397a33b01889ef9579f2584fc00d7be80157cbad6a858ac0dac8e5eaf3b8cc2bf50e90e016f090aecb60ae8be675d2f6b67b99905140abb1187e7ed9eaab9b10d0e158569a0ead15c6fe3fe71cae59988ef16751c7d78ce4436e75a3cfa66806d4a90330349e2acc58d7ff18290a0afceae58ee443d2cd88c4f0adbffe1b3da9537ae2c8ad2cfcd112c9e98bde19260bf72c188eeb7be6c8eaedface88c531cad3a62707cd526d4f22ef81e9557a4191b0ce1ea6051cb54cc70293c09e902157ca77e301c159d3d1ddfa1ac19d8c0c96df8f79b2e886a9892fc4f5365472645027408aba58c7f7cafe443c33b335832ad3211eebf5fe0368a86a7c5fa700500c9bcb8daa4d681e384f90aba9ce1a9a95decca988b9cc0337cc0c01e20ff46913be829e96ae2376f2046e680174e52d2b6885b992ac0dc9f33fb33807763521bbc182b00cd2401b73d252e9eacb8db70222318d93cfbd03aeccb30f2645acda8597b6b67d4b927440a1f08c4385783604d1ab75e5dcf74e8fc53e83957a73e606a34758cb46eaa92605e691999f74e1e0d59cb272008d5388acaff1efca89e0ab9e14cbf1f91a138d0a54252d52088b11ea0accd0270f16d9b96cb3d4e156a394e3afb34af2a5a26b9cdf4593f1f0a0886d1733b8903320d121388be3f82245a53ec228c86a4ae964cbba232ca18085cd52d32f5313bdf4cdb0ae3aa6bbbbc0802a61811ead957c749e30dfe0c8655697b2e210dd5666c808fe2826992c9a44d0663cda0624159cdf07c563ccea93bea41d4f8aea6cde7577fc0414991b8cee9da8d02267e7c16e10c84d5c0fc79671427c1acf95eab679d5ce8382f120aaa8f17d55e2a51cbe527ca02402cf34c094dbdd62632103d5524e0986da80fb51a42c13618b8cd66ca51aef73c9690b4c6a9c823cd8a90bf29bc1a584c07b453a84b2c12ef24d80aea21a86ec960d9d24226e9d056592c986ff56fb7ff7f5d3bb0f60bbed3b016e52dc6fb1b985dddeec538e797193f61dc02e675c4a9f44ae2f9af30250dfe0e48d05329a0ac469fd1e2d3dd2575013445112d452c589acf1d34b597379dbfda5800d16bc31989020fc4d704f4908873b63e2437731f17d70e9bc200e95e3d1362a37a50318e9c4253830235fdfefc28dce9fcba4fdfbb73e4ee3e6e5a809e3b264a974bc3937c8ce9eb6c1bec6bc1865ea29177b44ad041017a30c0d0ac51dfd08eec866792d500cbb3f86bd26de9b7220f61e89a20612c39dd4525d7cf8114579c857bc71884f65297d0cb2ccf437999f60e5ce287b409f2c082b1f3249aae927656e148f6f8c09fd3ca6e34ec1c20a835c6ecd9513dbb978aab9255382b1253dc6a04688c37d6d0ac0e00b30d317f8bde1a1ad354fff50c5f2f6d6d13cdae1c6e6334eede33eb8900f6f8fb5c3e06d3815b2e28bfa8ff3ddcacc519d48492e57de1c2877f2dbb47de535644049020cbc5ac78370057ae7c391301f0393fa2cdecf7e23bcc4e26e10722a37414d730557fc59de8ffce1e66bde6fe588a8590d76326a86c8299d38c41c36b914fb1da1a6325a22f7dff2838f1fe12240e569ade25fc8485a25756967ae55ef1de71c84c611edf08c125aea508ba6c3982d03b00f00fee3ed6ff1a58242f2a1e86765f0baf0c45bd10aa3db53c625ddd534dbf908b028332a3743d7106f8546efc7336062fc33f296819036b2efbafcc5f4de805d00fd93d065479c4d53871b89758686788bcf272108bfce1237d34297bda9839ed7d115779f5a4cbb627433ae7a48cc7d888cb80f6929783c42d1", 0x1000}], 0x80, &(0x7f00000012c0)=ANY=[@ANYBLOB='nodecompose,smackfsdef=wlan1posix_acl_access {keyring,func=CREDS_CHECK,obj_role=/dev/dsp\x00,subj_user=/dev/dsp\x00,measure,fscontext=staff_u,euid>', @ANYRESDEC=r7, @ANYBLOB="2c000b8a9763a2f8fa0014a8"])
clone(0x210a002000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
fremovexattr(r6, &(0x7f00000014c0)=@known='trusted.overlay.metacopy\x00')

06:23:07 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
fcntl$setsig(r1, 0xa, 0x3e)
r2 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r2, &(0x7f0000000000)='attr/fscreate\x00')
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  560.575552] binder: release 26054:26060 transaction 2342 in, still active
06:23:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = dup3(r1, r1, 0x80000)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)

06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018117f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  560.621887] binder: send failed reply for transaction 2342 to 26054:26060
[  560.670871] binder: undelivered TRANSACTION_ERROR: 29189
[  560.701680] binder: undelivered TRANSACTION_COMPLETE
[  560.716514] binder_alloc: binder_alloc_mmap_handler: 26076 20001000-20004000 already mapped failed -16
[  560.729854] binder: undelivered TRANSACTION_ERROR: 29189
[  560.748904] hfsplus: unable to parse mount options
[  560.754576] binder: BINDER_SET_CONTEXT_MGR already set
[  560.760236] binder: 26076:26078 ioctl 40046207 0 returned -16
06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018027f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  560.772667] binder: 26076:26087 got transaction to invalid handle
[  560.799865] binder: undelivered TRANSACTION_ERROR: 29201
[  560.806031] binder: undelivered TRANSACTION_ERROR: 29189
[  560.836751] binder: send failed reply for transaction 2349 to 26076:26078
[  560.878738] binder: undelivered TRANSACTION_ERROR: 29189
[  560.884529] binder: undelivered TRANSACTION_COMPLETE
06:23:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:07 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x3f00000000000000)

06:23:07 executing program 5:
r0 = add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="9af77f44606210c9736b57beb012879ecc913e6eb0da110760d187cb491013fe9b80ce2cf7bcc74dd2ede606a66879497765697598881a4c89279843650b338f329a419af8f3d51aa50c23db7048914ba77527a7758aa1e9f4c42677f331cdc963ee9391f3ba3baaea491e2eb729cfdd5b22257e89fa653236843f12152642e048df4106e4d2b6adbcef092ea630eab31b653439497b8ef21ad42f8815ec1d9037291d6f33eeceecb99b5576836a83fc1b3b075bce8f10d3046e868acf60ce61450d9cdf2d29", 0xc6, 0xfffffffffffffff9)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b8190e0a6487876f1c8cc2b93c98c0a4a0f7fafb0799195f02f9ee489a322a8265f61298949dd1f3ab3b651a719f3c455d8b06bd7075592545bfcbef0c654ffa85c67ccc2e905e2395bcba1efef1d2028bd80f4c6fa1a43b6f40d556e8c80aa45eac51ac9ee6f1f051a8f07bf4", 0x6d, r0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$notify(r1, 0x402, 0x80000012)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x4, 0x10000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={<r4=>0x0, 0x8}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x1, 0x7fffffff}, &(0x7f0000000380)=0x8)

06:23:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018107f0860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:08 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x101000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='#eprockeyrinumet0 gcm_b'], 0x17)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r2 = accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14)
accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffe69, 0xa5abda0a4fef0e3)
getpeername(0xffffffffffffffff, &(0x7f0000000a80)=@xdp, &(0x7f0000000b00)=0x80)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@multicast2, @loopback}, &(0x7f0000000b80)=0xc)
accept$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e40)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000f80)=0xfffffffffffffda9)
getpeername$packet(r0, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001640)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000012c0)=0xe8)
getsockname$packet(r0, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001740)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000071c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007180)={&(0x7f0000007200)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)
bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r3 = accept$alg(r1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}, 0x86000000}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[  561.125651] binder: BINDER_SET_CONTEXT_MGR already set
[  561.150903] binder: 26106:26109 ioctl 40046207 0 returned -16
06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f4860fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:08 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x300000000000000)

06:23:08 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400800)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x7, 0x8, 0x1, 0x1}})
timerfd_create(0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
fcntl$getown(r4, 0x9)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='gre0\x00', 0x10)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000400)={0x3, {{0xa, 0x4e22, 0x0, @remote, 0x80000000}}}, 0x88)
r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x100000000, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r6 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000240)={0x0, 0x0, {0x8, 0x2, 0x0, 0x7}})
connect$l2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r6, &(0x7f0000005fc0), 0x800000000000059, 0x0)
ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000300))
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  561.183553] binder: 26106:26117 got transaction to invalid handle
[  561.199690] binder: send failed reply for transaction 2356 to 26106:26109
[  561.212117] binder: undelivered TRANSACTION_COMPLETE
06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0360fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  561.238162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000380)={0x8e, 0x1, 0x20b, "0a1f650d120c106e751d98aaf0cbec7c72626412e2c9478d72ec4502fc8acfe2e4653ba6c8fe795d8fe29d0a84b19ecfe99509f5e8667b2fd28d08e80313615c9dda962b010f2d5c5383016492c32e10097d079fe854682579eac5a759f62af622dc3dce18bb2812711b24c743d9ed4d4dc30863cfb214d5425b5972ae91fbce1278cc2178e0b20f88589e0c7704"})

06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f1460fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  561.420344] binder_transaction: 23 callbacks suppressed
[  561.420360] binder: 26132:26135 transaction failed 29189/-3, size 0-0 line 2973
[  561.474088] binder: BINDER_SET_CONTEXT_MGR already set
[  561.494085] binder: 26132:26139 transaction failed 29189/-3, size 24-8 line 2973
[  561.503443] binder: 26132:26135 ioctl 40046207 0 returned -16
[  561.511676] binder: 26132:26142 transaction failed 29201/-22, size 0-0 line 2834
[  561.521130] binder: send failed reply for transaction 2363 to 26132:26135
06:23:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:23:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_stats})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f1160fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:08 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x1)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa00, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, <r3=>0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x6}, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100110, r0, 0x3)
r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000040)={0x2, 0x2})

06:23:08 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x1000000)

[  561.728691] binder: 26148:26153 unknown command 0
[  561.765762] binder: 26148:26153 ioctl c0306201 20000040 returned -22
06:23:08 executing program 2:
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, <r0=>0x0}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {}, [{}, {0x2, 0x0, r0}, {0x2, 0x0, r0}, {0x2, 0x7, r0}]}, 0x44, 0x0)
perf_event_open(&(0x7f0000005240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x404005, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x300000000000000})
mq_open(0x0, 0x801, 0x101, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401})
modify_ldt$read(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000007c0)={0x0, @data})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x0, 0x200000)
r3 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x3, 0x2)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x5, r3})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440))
bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xb774, {0x5, 0x10000, 0xfffffffffffffd26, 0x5, 0xda2, 0xfffffffffffffffe}, 0x3, 0x9}, 0xe)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000540)=0xffffffffffffffc9)
recvmsg(r2, 0x0, 0x40000001)
write$P9_RWSTAT(r3, &(0x7f0000000340)={0x7, 0x7f, 0x2}, 0x7)
connect$l2tp(r2, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x7}, 0x2, 0x4, 0x3}}, 0x26)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000004c0)={r3, 0x2, 0x100000000000, "91346fc280001f72be25f4fe9c0e4993be1b47a6d151bffe3946f575431449a403bb37a4718b5a732e0c673104ba606e247cdd725cbf223c96c86cc0fbf452a3dc851c68627437c4d2039b7c26eb6786925698af08d00c9a7728908c4e3c1c"})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003bc0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000050c0)=[{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000005000)="0b92a9885a9aa3dbf403b9e94618cc073decac3a8e6dacf267ee90b86ddd8d46e70ea6cbb157092291", 0x29}], 0x1}], 0x1, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

06:23:08 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5})

06:23:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f3560fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0821fe01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  561.847125] binder: BINDER_SET_CONTEXT_MGR already set
[  561.852708] binder: 26148:26153 ioctl 40046207 0 returned -16
[  561.859664] binder: 26148:26163 transaction failed 29189/-3, size 24-8 line 2973
[  561.896378] binder: 26148:26173 unknown command 0
[  561.905642] binder: 26148:26173 ioctl c0306201 20000040 returned -22
[  561.930191] binder_thread_release: 3 callbacks suppressed
[  561.930200] binder: release 26148:26153 transaction 2370 in, still active
06:23:08 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x4000000)

06:23:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fc01b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  561.931084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  561.937165] binder: send failed reply for transaction 2370 to 26148:26153
[  562.013126] binder_release_work: 1 callbacks suppressed
[  562.013131] binder: undelivered TRANSACTION_COMPLETE
[  562.033714] binder: 26186:26188 unknown command 0
[  562.049112] binder: 26186:26188 ioctl c0306201 20000140 returned -22
06:23:09 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  562.079744] binder: 26186:26188 transaction failed 29189/-3, size 0-0 line 2973
[  562.080993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  562.109795] binder_alloc_mmap_handler: 2 callbacks suppressed
[  562.109812] binder_alloc: binder_alloc_mmap_handler: 26186 20001000-20004000 already mapped failed -16
06:23:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe48b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  562.138524] binder: BINDER_SET_CONTEXT_MGR already set
[  562.150657] binder: 26186:26188 ioctl 40046207 0 returned -16
[  562.199835] overlayfs: filesystem on './file0' not supported as upperdir
[  562.207446] binder: 26186:26202 transaction failed 29189/-3, size 24-8 line 2973
[  562.225219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  562.232081] binder: 26186:26188 unknown command 0
[  562.238086] binder: send failed reply for transaction 2375 to 26186:26188
06:23:09 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4040, 0x0)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="0c28eb22e2c1c1b6c9b872e4bd70e3cc20bbfc0c4f285ad9d1837b08d025803c6cfbcc51a39ea53e61b0c10923d999a20285b32b0d93fbdeaf9eb2a3b30a5a214af622ba8f9a7df0fcff45bcfe0224ad5e8e2a479041f1e5d112966b95f8e20c24a3939be941672f1721a17757133695a705d5d752a123494c13c0a26f9b1e8e04137403f6252a4b0c63dabd7e3c8a9d3db79a654ff17aba31414c8f18b5f5a4099c1ff07c783c6161e196b6334980a3d3dcb4895dd78d75208e127b8be5c44f752a69e21177fe1811d0168def5f30affcae1f32320ca1")

[  562.245832] binder: 26186:26188 ioctl c0306201 20000140 returned -22
[  562.255690] binder: undelivered TRANSACTION_COMPLETE
06:23:09 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x1000000)

06:23:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe10b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000090000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  562.409970] binder: 26219:26222 transaction failed 29189/-3, size 0-0 line 2973
[  562.438904] binder_alloc: binder_alloc_mmap_handler: 26219 20001000-20004000 already mapped failed -16
[  562.466332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  562.474259] binder: BINDER_SET_CONTEXT_MGR already set
[  562.484098] binder: 26219:26222 ioctl 40046207 0 returned -16
[  562.490602] binder: 26219:26224 transaction failed 29189/-3, size 24-8 line 2973
[  562.508707] binder_transaction: 1 callbacks suppressed
06:23:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

06:23:09 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:09 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x3f00)

06:23:09 executing program 2:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000))
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
ptrace(0x4207, r1)
socket$tipc(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0)

06:23:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe11b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  562.508716] binder: 26219:26224 got transaction to invalid handle
[  562.536661] binder: 26219:26224 transaction failed 29201/-22, size 0-0 line 2834
[  562.544758] binder: release 26219:26222 transaction 2381 in, still active
[  562.559239] binder: send failed reply for transaction 2381 to 26219:26222
06:23:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xffff, 0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={<r2=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, [0x0, 0x40, 0x7fff, 0x3ff, 0xfd1, 0xfb8, 0x7, 0x10000, 0x4, 0x2, 0x1, 0x3, 0x7fffffff, 0x3, 0x7ff]}, &(0x7f0000000540)=0x100)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={r2, 0x98d}, 0x8)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x80000, 0x0)
ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='bond_slave_1\x00', 0x101, 0x4, 0x8001})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
ioctl$RTC_PIE_OFF(r4, 0x7006)

[  562.578682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  562.589768] binder: undelivered TRANSACTION_COMPLETE
06:23:09 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
semget$private(0x0, 0x7, 0x400)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x80000001, 0x4)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000000c0)={0x0, "ccd6216c470000da78ec9dfdbb4b4c2253900f1bb7877b89e96fe23fed6090ec", 0x3, 0x8, 0x0, 0x1ff, 0x1, 0x2, 0x7fffffff, 0xfb})

06:23:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe02b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0xe)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  562.644659] binder: 26244:26245 transaction failed 29189/-22, size 24-8 line 2834
[  562.731736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe14b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  562.780741] Trying to set illegal importance in message
[  562.781518] binder: 26248:26257 got transaction to invalid handle
06:23:09 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x101)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  562.828252] Trying to set illegal importance in message
06:23:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:23:09 executing program 2:
syz_open_dev$vcsn(0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040))
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={0x0}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

[  562.922098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:09 executing program 2:
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x3, 0x9, 0x0, 0xb4ef}, 0x8)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={<r1=>0x0, @in6={{0xa, 0x4e20, 0xffff, @loopback, 0xc33a}}, [0x73d, 0x8, 0x5, 0x3, 0x6, 0x80, 0x21, 0x88a3, 0xfffffffffffffbff, 0x8e, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x3ff]}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x0, 0x1f, 0x16, r1}, &(0x7f0000000140)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x2, @rand_addr=0x3f000000}]}}}]}, 0x38}}, 0x0)

06:23:10 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x2000)

06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe21b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xb)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}, {}], 0x0, [{}, {}]}, 0x98)

06:23:10 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00'})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x300)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0xeec0}}, 0x18)

[  563.136824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe08b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x4, &(0x7f0000000040)=""/190, &(0x7f0000000480)=[{0x1, 0xcb, 0x7, &(0x7f0000000100)=""/203}, {0x0, 0xab, 0x7f, &(0x7f0000000200)=""/171}, {0x8000, 0x81, 0x0, &(0x7f00000002c0)=""/129}, {0x0, 0xef, 0x7, &(0x7f0000000380)=""/239}]})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2050, r1, 0x4e)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  563.255613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  563.271231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  563.278041] Unknown ioctl -1072143335
[  563.297496] Unknown ioctl -1072143335
06:23:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300008a6c1a8f"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe25b2a4a280930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070657220000000040000006c65302c6c6f7765726500003d442f6669b2769c7f79ad35d1bb6c65302c776f726bbd756102"])
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x9, 0x0, 0xff, 0x9, 0x6}, 0x20)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

06:23:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x20, 0xed, 0x400000000, 0x7, 0x0, 0x1, 0x48800, 0xa, 0x6, 0x3, 0x7ff, 0x3, 0x4, 0x4f53, 0x3, 0x40, 0x1, 0x1, 0x7, 0x0, 0x7e6, 0x0, 0x6, 0x1, 0xffffffff, 0x7fffffff, 0xff, 0x100000000, 0x40, 0x5, 0x0, 0x1ff, 0x6ee, 0x2, 0x8, 0x8, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x5}, 0x0, 0x879, 0x4, 0xf, 0x6, 0x5a, 0x20}, 0x0, 0xc, r1, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast1, <r2=>0x0}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x31}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41f00, 0x1, [], r2, 0x59356757b9643d9f}, 0x48)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb1501de0900000000000000e2960500000085d5"], 0x15, 0x2)
r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x9, 0x400000)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000002c0)={0x3ff, 0x8})

06:23:10 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x4)

06:23:10 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  563.505725] binder: BINDER_SET_CONTEXT_MGR already set
[  563.511088] binder: 26248:26257 ioctl 40046207 0 returned -16
[  563.561884] binder_alloc_new_buf_locked: 14 callbacks suppressed
[  563.561891] binder_alloc: 26310: binder_alloc_buf, no vma
[  563.581821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  563.585611] binder_alloc: binder_alloc_mmap_handler: 26310 20001000-20004000 already mapped failed -16
[  563.600497] binder: BINDER_SET_CONTEXT_MGR already set
[  563.606144] binder: 26310:26313 ioctl 40046207 0 returned -16
[  563.612200] binder_alloc: 26310: binder_alloc_buf, no vma
[  563.626269] overlayfs: unrecognized mount option "upper " or missing value
[  563.627171] binder: 26310:26318 got transaction to invalid handle
[  563.648522] binder: release 26310:26313 transaction 2392 in, still active
06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a266930a600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00')
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x8, 0xf, 0x3, "261508b93d6d1a6c3d082d5ad7e38c80aeb23d406488fce54aebe13d55fc704e", 0x7f7f7f5f})

[  563.662228] binder: send failed reply for transaction 2392 to 26310:26313
[  563.671746] overlayfs: unrecognized mount option "upper " or missing value
[  563.691829] binder: undelivered TRANSACTION_COMPLETE
06:23:10 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x8000000000000000)

[  563.763464] binder_alloc: 26328: binder_alloc_buf, no vma
[  563.777161] binder_alloc: binder_alloc_mmap_handler: 26328 20001000-20004000 already mapped failed -16
[  563.803140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:10 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300008a6c1a8f"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:10 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x400400, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r3, 0x302, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xe2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000814)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=<r6=>0x0, @ANYBLOB="cd0000008f11902f552d9fea801caa6ece69eb36c940bebf2896bcfe1646dd6ec55e5d6ad7a90335e8401de114841b4421d6feec45e5eeb61cb6dfd7d7d4c458fedd956901401b064a3021d75452a33bd00e72d8e3b9bf7ed9cec051917edaa72b546e6b0afab815a64dd30bf42c79cc28870ea43db46cda96422a9ad17ea1ee8d7087ceb09119e490eef52b03736afdb58150e0740c5dc4175ee047b0d833cbcc625c9e8aafdc601911ef7eafcac6276d47da5d8ba41cbc246355111d216832ed00000000000000000000000000000000"], &(0x7f0000000140)=0xd5)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="ea", @ANYRES16=r3, @ANYBLOB="000227bd7000fcdbdf250700000014000300080004000900000008000400060000000800040009000000080004000700000008000400f8ffffff080004000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={r6, @in={{0x2, 0x4e21, @broadcast}}, [0x30c13946, 0x4, 0x1, 0xdf, 0xe7, 0x8, 0xfff, 0x2, 0x5, 0x7, 0x1, 0x1ff, 0x1, 0x80000001, 0x1004000000000]}, &(0x7f0000000280)=0x100)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8)

[  563.804293] binder: BINDER_SET_CONTEXT_MGR already set
[  563.825441] binder_alloc: 26328: binder_alloc_buf, no vma
[  563.831193] binder: 26328:26329 ioctl 40046207 0 returned -16
[  563.848533] binder: 26328:26334 got transaction to invalid handle
06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a2809318600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  563.883296] binder: release 26328:26329 transaction 2399 in, still active
[  563.905222] binder: send failed reply for transaction 2399 to 26328:26329
[  563.918140] binder_alloc: 26335: binder_alloc_buf, no vma
06:23:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0059180000000000"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c630000661bc816aeae2ca2c4b003f98b9afba0ad88c384b7366fd8ae7e9a186ac20a1685cb9e3ce3113dfd4fa47ec295d9e4c7d68da0c450"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a2809314600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  563.948195] binder: undelivered TRANSACTION_COMPLETE
06:23:10 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x4, &(0x7f0000000040)=""/190, &(0x7f0000000480)=[{0x1, 0xcb, 0x7, &(0x7f0000000100)=""/203}, {0x0, 0xab, 0x7f, &(0x7f0000000200)=""/171}, {0x8000, 0x81, 0x0, &(0x7f00000002c0)=""/129}, {0x0, 0xef, 0x7, &(0x7f0000000380)=""/239}]})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2050, r1, 0x4e)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  563.988731] binder: release 26335:26339 transaction 2406 out, still active
[  564.012470] binder: BINDER_SET_CONTEXT_MGR already set
06:23:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a2809325600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  564.046082] binder: unexpected work type, 4, not freed
[  564.048922] Unknown ioctl -1072143335
[  564.055956] binder: 26349:26353 ioctl 40046207 0 returned -16
[  564.065626] binder: undelivered TRANSACTION_COMPLETE
[  564.070998] binder_alloc: 26335: binder_alloc_buf, no vma
[  564.083267] binder: release 26335:26339 transaction 2406 in, still active
06:23:11 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

06:23:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a2809348600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
sendmmsg(r1, &(0x7f0000000540), 0x40000000000022b, 0x20007ffc)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x101, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x13c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1e7a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2f2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb93}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa47}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[  564.097723] binder: send failed reply for transaction 2406, target dead
[  564.137322] binder: 26349:26360 got transaction to invalid handle
06:23:11 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
getsockopt(r2, 0x5, 0xfffffffffffffff8, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)

06:23:11 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x4000)

06:23:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a2809311600800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:11 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x1ff, 0xa2, 0x1000, 0x1}})
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x57ff, 0x402081)
write$P9_RCREATE(r1, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x58, 0x3, 0x8}}}, 0x18)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0)=0x3ff, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[]}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0)

06:23:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a210800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  564.359712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  564.366514] IPv6: NLM_F_CREATE should be set when creating new route
[  564.373036] IPv6: NLM_F_CREATE should be set when creating new route
06:23:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x48, &(0x7f0000000100)=[@ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x1, 0x2, 0x4}], &(0x7f0000000180)=[0x78, 0x0, 0x20, 0x40, 0x38, 0x38, 0x48, 0x38, 0x48]}, 0x7}}, @register_looper], 0xb5, 0x0, &(0x7f0000000380)="21aa36dc8c23c6230953eb7ed13625b531d3a2995a00e7fa7179ef4c2edbdf357e7137c88b97e717606761b4e5d73e65f345c1a95adaadb3d2596908abcea80d81b155e6356b3f986b32b9c2c7b62270d974c3ab35baf198e75847a17431c960179fe495e1f92a9cacb5a3450237d380169a136e16748eef3c4c9c6a80386dd3fb0b05d7cc936c282176a2047e983c60174ebc5efb45aff6a5287bc29c8800e786a3a032b2d5c7fa0f6a6cb5fa0378e6b2050e0e85"})

06:23:11 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x4)
keyctl$session_to_parent(0x12)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0x0)

06:23:11 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

06:23:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a60a402ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x9, <r2=>0x0, 0x10000, 0x4})
ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000180)={r2, 0x1})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r3 = accept$alg(r0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400, 0x0)
write(r4, &(0x7f0000000100), 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/104, 0xff40}], 0x1)

06:23:11 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KDADDIO(r2, 0x4b34, 0x1ff)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800008000000000, 0x40010, r1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x5bdf, 0x401, 0xffffffffffffb22e, 0x9, 0x6, 0x800, 0x200, 0x800, 0x8, 0x5})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  564.808221] binder_alloc: binder_alloc_mmap_handler: 26349 20001000-20004000 already mapped failed -16
[  564.818750] binder_alloc: 26349: binder_alloc_buf, no vma
[  564.824443] binder: 26349:26398 got transaction to invalid handle
06:23:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600300ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  564.857863] binder_alloc: 26400: binder_alloc_buf, no vma
[  564.929321] binder: 26400:26415 got transaction to invalid handle
[  564.962446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  564.969190] IPv6: NLM_F_CREATE should be set when creating new route
06:23:11 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000000)='selinux*]posix_acl_accessproc[\x00', 0x4)
setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@rand_addr=0x2, @empty}, 0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  564.975794] IPv6: NLM_F_CREATE should be set when creating new route
06:23:12 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a604800ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:12 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000000c0)=""/4096)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x143002, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000010c0))
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x2)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001100), &(0x7f0000001140)=0xc)
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  565.038071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:23:12 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
r1 = dup3(0xffffffffffffffff, r0, 0x80000)
write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
lseek(r0, 0x0, 0x2)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x321802, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4600010000000000000000000000003e0000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000080000000000000005000000000000008e519901d693e390c2f7de511ccc5ca7c28e06a93d17547dca88fcb8a976ea0a02af6313836d11f153dbdce844c037d1e369823e4f636d2df139a6c59c22a869e8bd3f509f64fece575ec56bc4c27ff2332b4bacd980500a913659920c86fb44a56bf19040878c6032ceccdc6203ee0d36ee53aefe79e667410b"], 0xd2)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

[  565.130794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.137641] IPv6: NLM_F_CREATE should be set when creating new route
[  565.144425] IPv6: NLM_F_CREATE should be set when creating new route
06:23:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='nr0\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c631000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x205}, 0x8)

06:23:12 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0xa8001)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040))

06:23:12 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = dup2(r1, r1)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x20, 0xec3c, 0x2}})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x7d, 0x928, 0x4, 0x537, 0x10, 0x4})
prctl$PR_SET_FP_MODE(0x2d, 0x1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f972f7f91b7a13174a7d3d3f22c625c2b40a8deaf76314ab9c12a008aed8df6c114fcc764014c4a895aeb28370f3443d7693dafa424a4c35688d9f94dcc3bea1fab9739cfea07d41372077727f1a0c39c9366522d94aa2", @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040050)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0)

06:23:12 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a603500ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

[  565.675421] binder: BINDER_SET_CONTEXT_MGR already set
[  565.685449] binder: 26400:26452 ioctl 40046207 0 returned -16
[  565.691601] binder_alloc: 26400: binder_alloc_buf, no vma
[  565.697881] binder_release_work: 34 callbacks suppressed
[  565.697889] binder: undelivered TRANSACTION_ERROR: 29189
[  565.717150] binder: undelivered TRANSACTION_ERROR: 29189
[  565.768516] binder: 26456:26458 ioctl 89a0 20000100 returned -22
[  565.784841] binder: 26456:26458 unknown command 1073932
[  565.787902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.790974] binder: 26456:26458 ioctl c0306201 20000140 returned -22
[  565.796984] IPv6: NLM_F_CREATE should be set when creating new route
[  565.797010] IPv6: NLM_F_CREATE should be set when creating new route
[  565.825741] binder_alloc: 26456: binder_alloc_buf, no vma
[  565.843178] binder_alloc: binder_alloc_mmap_handler: 26456 20001000-20004000 already mapped failed -16
[  565.862748] binder: BINDER_SET_CONTEXT_MGR already set
[  565.869246] binder: 26456:26458 ioctl 40046207 0 returned -16
06:23:12 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a602c02ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  565.876325] binder: 26456:26462 ioctl 89a0 20000100 returned -22
[  565.886160] binder: 26456:26464 unknown command 1073932
[  565.897885] binder: 26456:26464 ioctl c0306201 20000140 returned -22
06:23:12 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1000000000010011, r0, 0x0)

[  565.922311] binder: 26456:26458 got transaction to invalid handle
06:23:12 executing program 2:
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x81, 0x40000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000001b40)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)
sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f00000006c0)=""/165, 0xa5}], 0x3, 0x0, 0x0, 0x6}, 0x1)
recvmsg$kcm(r2, 0x0, 0x20)
r4 = socket$kcm(0x2, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a31eb2f3af6915b36cad76f9f499abb9522fd44d3c2753cd4e02695861427d50f55985e0862f1044d91c2b1ac1e055cb3517427d64164b0d9fb757203f45b277f98ce755d245468c91833316518ec245c79bcd6e4f133a4cb05f470ac7513ce63f2f3153ef4b0beb0b866a4f425d72ed9fe4c3987", 0x1ff)
socket$kcm(0x29, 0x235aefe14533da7c, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000008c0))
r5 = syz_open_procfs(0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000340)=r0)
flistxattr(r4, &(0x7f00000003c0)=""/79, 0x4f)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x4)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000000c0)={0x807, 0x0, 0x9, 0x3}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf32(r6, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)

[  565.961166] binder: undelivered TRANSACTION_ERROR: 29189
[  565.967068] binder: undelivered TRANSACTION_ERROR: 29189
[  565.978693] binder: send failed reply for transaction 2420 to 26456:26458
[  565.991753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.998399] IPv6: NLM_F_CREATE should be set when creating new route
[  566.004924] IPv6: NLM_F_CREATE should be set when creating new route
06:23:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x404000, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000380)=""/253, &(0x7f00000001c0)=0xfd)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast2}], 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  566.021807] binder: undelivered TRANSACTION_ERROR: 29201
[  566.060780] binder: undelivered TRANSACTION_COMPLETE
06:23:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a605802ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  566.070183] binder: undelivered TRANSACTION_ERROR: 29189
[  566.083102] binder_alloc: binder_alloc_mmap_handler: 26478 20001000-20004000 already mapped failed -16
[  566.094994] binder: BINDER_SET_CONTEXT_MGR already set
[  566.105677] binder: 26478:26480 ioctl 40046207 0 returned -16
[  566.116182] binder: undelivered TRANSACTION_ERROR: 29189
06:23:13 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r2=>0x0)
migrate_pages(r2, 0x8cf, &(0x7f0000000080)=0xe7, &(0x7f0000000100)=0x80)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x8000, 0x5, 0x6, 0x1})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2000000000000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8)
recvfrom$packet(r2, &(0x7f0000000380)=""/139, 0x8b, 0x121, &(0x7f0000000280)={0x11, 0xf6, r3, 0x1, 0x8000, 0x6, @local}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x100c}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r4, r2}}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  566.130692] binder: release 26478:26480 transaction 2427 in, still active
[  566.137973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.144572] IPv6: NLM_F_CREATE should be set when creating new route
[  566.151149] IPv6: NLM_F_CREATE should be set when creating new route
[  566.154181] binder: send failed reply for transaction 2427 to 26478:26480
06:23:13 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={<r3=>0x0, 0x8}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x401}, 0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80000000010011, r0, 0x0)

[  566.205371] binder: undelivered TRANSACTION_ERROR: 29189
[  566.211044] binder: undelivered TRANSACTION_COMPLETE
06:23:13 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x94d3cff73c0a4954, r0, 0x0)

[  566.256764] binder_alloc: binder_alloc_mmap_handler: 26491 20001000-20004000 already mapped failed -16
[  566.266456] binder: undelivered TRANSACTION_ERROR: 29189
[  566.279264] binder: BINDER_SET_CONTEXT_MGR already set
[  566.293957] binder: 26491:26495 ioctl 40046207 0 returned -16
06:23:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a607402ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  566.366131] binder: undelivered TRANSACTION_ERROR: 29189
[  566.372053] binder: release 26491:26493 transaction 2433 in, still active
06:23:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b946404001"], 0x0, 0x0, 0x0})

[  566.406267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.412894] IPv6: NLM_F_CREATE should be set when creating new route
[  566.419033] binder: send failed reply for transaction 2433 to 26491:26493
[  566.419450] IPv6: NLM_F_CREATE should be set when creating new route
[  566.454476] binder: undelivered TRANSACTION_COMPLETE
[  566.504397] binder: 26510:26512 unknown command 1077954233
[  566.534186] binder: 26510:26512 ioctl c0306201 20000040 returned -22
[  566.581370] binder_alloc: binder_alloc_mmap_handler: 26510 20001000-20004000 already mapped failed -16
[  566.615837] binder: BINDER_SET_CONTEXT_MGR already set
[  566.621292] binder: 26510:26512 ioctl 40046207 0 returned -16
06:23:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:23:13 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a601400ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  566.627897] binder_transaction: 23 callbacks suppressed
[  566.627915] binder: 26510:26516 transaction failed 29189/-3, size 24-8 line 2973
[  566.666601] binder: 26510:26520 unknown command 1077954233
[  566.692836] binder: 26510:26520 ioctl c0306201 20000040 returned -22
[  566.709071] binder: release 26510:26512 transaction 2439 in, still active
[  566.720337] binder: send failed reply for transaction 2439 to 26510:26512
[  566.731047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:13 executing program 2:
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x81, 0x40000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000001b40)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)
sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f00000006c0)=""/165, 0xa5}], 0x3, 0x0, 0x0, 0x6}, 0x1)
recvmsg$kcm(r2, 0x0, 0x20)
r4 = socket$kcm(0x2, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6e65742f73797a31eb2f3af6915b36cad76f9f499abb9522fd44d3c2753cd4e02695861427d50f55985e0862f1044d91c2b1ac1e055cb3517427d64164b0d9fb757203f45b277f98ce755d245468c91833316518ec245c79bcd6e4f133a4cb05f470ac7513ce63f2f3153ef4b0beb0b866a4f425d72ed9fe4c3987", 0x1ff)
socket$kcm(0x29, 0x235aefe14533da7c, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000008c0))
r5 = syz_open_procfs(0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000340)=r0)
flistxattr(r4, &(0x7f00000003c0)=""/79, 0x4f)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x4)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000000c0)={0x807, 0x0, 0x9, 0x3}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf32(r6, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)

06:23:13 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="26f73c"], 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c630000a799be4cb867a7982ef06c3173519530a0277847ae26494b42b33fc9b3149b23a8841e1da4c58cd75ab9ae52fcf5"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  566.737685] IPv6: NLM_F_CREATE should be set when creating new route
[  566.744320] IPv6: NLM_F_CREATE should be set when creating new route
[  566.744347] binder: undelivered TRANSACTION_COMPLETE
06:23:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a601100ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  566.812037] binder: 26530:26533 transaction failed 29189/-3, size 0-0 line 2973
[  566.847206] binder_alloc: binder_alloc_mmap_handler: 26530 20001000-20004000 already mapped failed -16
06:23:13 executing program 5:
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10)
open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

[  566.869495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  566.876430] IPv6: NLM_F_CREATE should be set when creating new route
[  566.883045] IPv6: NLM_F_CREATE should be set when creating new route
[  566.895353] binder: BINDER_SET_CONTEXT_MGR already set
[  566.901463] binder: 26530:26533 ioctl 40046207 0 returned -16
[  566.915774] binder: 26530:26544 transaction failed 29189/-3, size 24-8 line 2973
[  566.959477] binder: 26530:26537 got transaction to invalid handle
06:23:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a6008fcffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  567.005865] binder: release 26530:26533 transaction 2444 in, still active
[  567.013292] binder: send failed reply for transaction 2444 to 26530:26533
[  567.031234] binder: 26530:26537 transaction failed 29201/-22, size 0-0 line 2834
06:23:13 executing program 5:
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x28000)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x3, 0x7})
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x1)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x511000, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x3})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x42, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]})

[  567.063264] binder: undelivered TRANSACTION_COMPLETE
06:23:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8)
ioprio_get$uid(0x3, r2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00424d4001"], 0x0, 0x0, 0x0})

[  567.120687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600806ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  567.295154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.318683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.322997] binder: 26557:26559 unknown command 1078804992
[  567.358510] binder: 26557:26559 ioctl c0306201 20000040 returned -22
[  567.417893] binder_alloc: binder_alloc_mmap_handler: 26557 20001000-20004000 already mapped failed -16
[  567.441817] binder: BINDER_SET_CONTEXT_MGR already set
[  567.447619] binder: 26557:26559 ioctl 40046207 0 returned -16
[  567.453739] binder: 26557:26565 transaction failed 29189/-3, size 24-8 line 2973
[  567.475592] binder: 26557:26567 unknown command 1078804992
[  567.482220] binder: 26557:26567 ioctl c0306201 20000040 returned -22
[  567.501797] binder: release 26557:26559 transaction 2451 in, still active
[  567.515404] binder: send failed reply for transaction 2451 to 26557:26559
06:23:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:23:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600808ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:14 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="186843965839aaaaaaaaaaaaaaaaaaaaaa000800490000280000000000329078ac141400ac1423bb0e00907800000000000000000000"], &(0x7f0000000040)={0x1, 0x1})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

06:23:14 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x2, 0x7, 0x63fd, 0x1000})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  567.537836] binder: undelivered TRANSACTION_COMPLETE
[  567.598590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:14 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x200400000001, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400, 0x0)
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000080)=0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

06:23:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180), 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a60080fffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:14 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x800, 0x88080)
r3 = getuid()
r4 = getegid()
write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x3, 0x0, 0x4, 0xd7b, 0x3ff, 0x3, {0x6, 0xe2b, 0x3, 0x5, 0x4800000, 0x1, 0x0, 0xfffffffffffffbff, 0x6, 0x101, 0x9a, r3, r4, 0x5, 0xfff}}}, 0x90)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
read(r1, &(0x7f0000000100)=""/31, 0x1f)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

06:23:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

06:23:14 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x20000)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, 0xffffffffffffffff, 0x0)

06:23:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
io_setup(0xffffffffffffff90, &(0x7f0000000000)=<r2=>0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x6, 0x40000)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000340)={0xd00, 0x2, 0x100000000, 0x0, 0x0, 0x7, 0x4, 0xe38e, 0x0, 0x4, 0xe8af, 0x1})
io_getevents(r2, 0x8, 0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x77359400})
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r5 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="d3ab2719", 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r6, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0xdc}, @in6={0xa, 0x4e22, 0x6, @local, 0x109d6a62}}}, 0x118)
recvmmsg(r5, &(0x7f00000062c0)=[{{&(0x7f0000000200)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003ec0), 0x0, &(0x7f0000003f40)=""/190, 0xbe}}, {{&(0x7f0000000180)=@ipx, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/240, 0xf0}}], 0x2, 0x0, &(0x7f0000006400)={0x77359400})

[  567.834103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.839372] binder: 26585:26593 transaction failed 29189/-3, size 0-0 line 2973
[  567.854066] binder_alloc: binder_alloc_mmap_handler: 26585 20001000-20004000 already mapped failed -16
[  567.864882] binder: BINDER_SET_CONTEXT_MGR already set
[  567.870875] binder: 26585:26593 ioctl 40046207 0 returned -16
06:23:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600811ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  567.878724] binder: 26585:26594 transaction failed 29189/-3, size 24-8 line 2973
[  567.888203] binder: 26585:26597 got transaction to invalid handle
[  567.897133] binder: 26585:26597 transaction failed 29201/-22, size 0-0 line 2834
[  567.912364] binder: release 26585:26593 transaction 2456 in, still active
06:23:14 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  567.932333] binder: send failed reply for transaction 2456 to 26585:26593
[  567.953626] binder: undelivered TRANSACTION_COMPLETE
06:23:14 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x18000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000fcdbdf25"], 0x1}}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

06:23:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  567.976127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600813ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  568.061117] binder: 26608:26615 transaction failed 29189/-3, size 0-0 line 2973
[  568.084660] binder_alloc: binder_alloc_mmap_handler: 26608 20001000-20004000 already mapped failed -16
[  568.125635] binder: BINDER_SET_CONTEXT_MGR already set
[  568.131427] binder: 26608:26615 ioctl 40046207 0 returned -16
[  568.161371] binder: 26608:26615 transaction failed 29189/-3, size 24-8 line 2973
[  568.170051] binder: release 26608:26615 transaction 2463 in, still active
[  568.183286] binder: send failed reply for transaction 2463 to 26608:26615
[  568.220234] binder: undelivered TRANSACTION_COMPLETE
[  568.236962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:15 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
socket(0x11, 0x5, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:15 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:15 executing program 2:
fanotify_init(0x0, 0x0)
poll(&(0x7f0000001340)=[{}, {}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
kexec_load(0x6, 0x80000000000005e, &(0x7f0000000640), 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in=@dev}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240))
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000540)=0xe, 0x80800)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x0, 0x8003, 0x3, 0x2}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000003c0)=""/94, 0x5e)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x57db8605e6bbee73)
r1 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000001, 0x84030, r1, 0x0)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
getresgid(&(0x7f0000000340), &(0x7f0000000480), &(0x7f00000004c0))
rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00')

06:23:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
sendfile(r0, r1, &(0x7f0000000100)=0x3e, 0x9)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})

06:23:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

06:23:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600860ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  568.363269] binder: 26630:26635 unknown command -930303146
[  568.372552] binder: 26630:26635 ioctl c0306201 20000040 returned -22
[  568.389215] binder_alloc: binder_alloc_mmap_handler: 26630 20001000-20004000 already mapped failed -16
[  568.394718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.400312] binder: BINDER_SET_CONTEXT_MGR already set
06:23:15 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000000)={0x101, "1f72aca619e3cba9eab05946be856144f992f5d5b1f3712586e8203c40452f96", 0x3, 0x100, 0x3, 0x80000001, 0x1c, 0x2, 0x1})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  568.410854] binder: 26630:26635 ioctl 40046207 0 returned -16
[  568.425979] binder: release 26630:26635 transaction 2469 in, still active
[  568.435532] binder: send failed reply for transaction 2469 to 26630:26635
06:23:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xff, 0x800)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={<r3=>0x0, 0x2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0xffff, @mcast1, 0x3}}}, 0x84)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600810ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  568.464490] binder: undelivered TRANSACTION_COMPLETE
06:23:15 executing program 2:
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x3a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x4, 0x4}}, 0x26)
sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x1400)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0))
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x0, 0x4}}, 0x2e)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340), 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0))
write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x12007)

[  568.555934] binder_alloc: binder_alloc_mmap_handler: 26649 20001000-20004000 already mapped failed -16
[  568.577778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.592312] binder: BINDER_SET_CONTEXT_MGR already set
[  568.597941] binder: 26649:26655 ioctl 40046207 0 returned -16
06:23:15 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresgid(&(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000180)=<r3=>0x0)
chown(&(0x7f0000000000)='./file0\x00', r2, r3)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
getgid()
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  568.605363] binder_alloc_new_buf_locked: 15 callbacks suppressed
[  568.605371] binder_alloc: 26649: binder_alloc_buf, no vma
06:23:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a60080bffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  568.662729] binder: release 26649:26655 transaction 2474 in, still active
[  568.680748] binder: send failed reply for transaction 2474 to 26649:26655
[  568.713722] binder: undelivered TRANSACTION_COMPLETE
[  568.750372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.796218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:15 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400100, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)={0x1, '-'}, 0x2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x600, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff31, 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES64=r3, @ANYRES16=0x0, @ANYRESHEX, @ANYPTR], 0x0, 0x0, 0x0})

06:23:15 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600803ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  568.984713] binder_alloc: binder_alloc_mmap_handler: 26676 20001000-20004000 already mapped failed -16
[  568.994633] binder: BINDER_SET_CONTEXT_MGR already set
[  569.000133] binder: 26676:26679 ioctl 40046207 0 returned -16
[  569.006326] binder_alloc: 26676: binder_alloc_buf, no vma
[  569.013682] binder: release 26676:26679 transaction 2480 in, still active
[  569.024224] binder: send failed reply for transaction 2480 to 26676:26679
06:23:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  569.044547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.090930] binder: undelivered TRANSACTION_COMPLETE
[  569.114543] binder_alloc: 26684: binder_alloc_buf, no vma
[  569.156140] binder_alloc: binder_alloc_mmap_handler: 26684 20001000-20004000 already mapped failed -16
[  569.191412] binder: BINDER_SET_CONTEXT_MGR already set
[  569.196955] binder: 26684:26688 ioctl 40046207 0 returned -16
06:23:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:23:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a60080affa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:16 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000400)={0x0, 0x0, [], @raw_data=[0x4a0, 0x1, 0x8, 0x7f, 0x5, 0x10000, 0x5, 0x0, 0xc2d, 0x4c, 0x20, 0x5, 0x8, 0x5, 0x101, 0x7, 0x6, 0x101, 0xc6, 0x9, 0x5, 0x7ff, 0x6, 0x1, 0x4, 0xff, 0x77c0bb54, 0x5, 0x4, 0x2, 0x2, 0x8]})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040))
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00')
sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000804}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x4, 0x6, 0x3f, 0xffffffffffffffff, 'syz0\x00', 0x1}, 0x6, 0x10, 0x400, r2, 0x3, 0xfff, 'syz0\x00', &(0x7f0000000100)=['cgroup*#trustedself*system@vboxnet0self))bdev\x00', '/dev/vbi#\x00', '/dev/vbi#\x00'], 0x42, [], [0x8, 0xfff, 0x7, 0x7]})

06:23:16 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x480000)
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clock_adjtime(0x6, &(0x7f0000000000)={0x7, 0x1, 0x80000000, 0x3, 0x4, 0xfffffffffffffff8, 0x6, 0x4, 0x0, 0x400, 0x2c, 0x0, 0x9, 0x100, 0x6, 0x80000000, 0x2, 0x3, 0x6, 0xec2, 0x17c, 0x7, 0x80000001, 0x6645, 0x9, 0x7})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

[  569.225155] binder_alloc: 26684: binder_alloc_buf, no vma
[  569.258463] binder: 26684:26691 got transaction to invalid handle
[  569.266537] binder: release 26684:26688 transaction 2485 in, still active
[  569.267838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.280185] binder: send failed reply for transaction 2485 to 26684:26688
[  569.313319] binder: undelivered TRANSACTION_COMPLETE
06:23:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
fcntl$getownex(r0, 0x10, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:16 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000100)=0x81)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80040, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600804ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:16 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_targets\x00')
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(r1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0xc1, 0x809a, 0xe9e})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

06:23:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600809ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  569.446407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.447738] binder_alloc: 26711: binder_alloc_buf, no vma
[  569.562171] binder_alloc: binder_alloc_mmap_handler: 26711 20001000-20004000 already mapped failed -16
[  569.576285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.578104] binder: BINDER_SET_CONTEXT_MGR already set
06:23:16 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x4)
shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)

06:23:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600802ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  569.643695] binder: 26711:26718 ioctl 40046207 0 returned -16
[  569.667435] binder_alloc: 26711: binder_alloc_buf, no vma
06:23:16 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x4000)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x6, 0x80, 0x8001})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  569.706389] binder: release 26711:26718 transaction 2492 in, still active
[  569.734764] binder: send failed reply for transaction 2492 to 26711:26718
[  569.759948] binder: undelivered TRANSACTION_COMPLETE
[  569.773663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

06:23:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600807ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:16 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:16 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x7, 0x2, 0x8, 0xfffffffeffffffff, 0x0, 0x1ff, 0x10800, 0x4, 0x401, 0x100000001, 0x20, 0x675, 0x5, 0x1, 0x10001, 0xcb37, 0x7, 0x0, 0x5, 0x3c0d, 0xffffffff80000001, 0x8000, 0x0, 0xe3, 0x101, 0xfffffffffffffbc9, 0x100000000, 0x101, 0xa2, 0x200, 0x9, 0x2, 0x6d4d, 0x401, 0x1, 0x8, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2, 0xa8, 0x81, 0xb, 0xbf, 0x7, 0x1}, r2, 0x2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4)

06:23:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600812ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  570.135349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  570.147004] binder_alloc: 26746: binder_alloc_buf, no vma
06:23:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0xa7, 0x6}}, 0x28)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x5, 0xbb, 0x2, 0x7a8f})
r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r3, 0x0)

[  570.193622] binder_alloc: binder_alloc_mmap_handler: 26746 20001000-20004000 already mapped failed -16
[  570.228462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  570.228936] binder: BINDER_SET_CONTEXT_MGR already set
[  570.263223] binder_alloc: 26746: binder_alloc_buf, no vma
[  570.269872] binder: 26746:26755 ioctl 40046207 0 returned -16
[  570.281840] binder: 26746:26767 got transaction to invalid handle
[  570.304134] binder: release 26746:26755 transaction 2498 in, still active
[  570.317500] binder: send failed reply for transaction 2498 to 26746:26755
[  570.337501] binder: undelivered TRANSACTION_COMPLETE
06:23:17 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x4000)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x6, 0x80, 0x8001})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600805ffa84302910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:17 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x420000, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x80000001)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
readahead(r2, 0x6, 0x80000001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x4, 0x8001, 0x100000000, 0x3, 0x0, 0x3, 0x5, 0x8000, 0x7778, 0x20, 0x2, 0xfffffffffffffffe, 0x800}, {0x1, 0x3, 0x7, 0xbf22, 0x3, 0x3ec86158, 0x3, 0x9, 0x0, 0x3f, 0x313bc8c0, 0x9, 0x2}, {0x80000000, 0x6, 0x1, 0x5, 0x8000, 0x1000, 0x401, 0x8000, 0x8, 0xffff, 0x0, 0x1, 0x5}], 0x1ff})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})

06:23:17 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

06:23:17 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  570.439037] binder: BINDER_SET_CONTEXT_MGR already set
06:23:17 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x600000, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  570.460807] binder: 26773:26776 ioctl 40046207 0 returned -16
[  570.478806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  570.486170] binder_alloc: 26773: binder_alloc_buf, no vma
06:23:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa80a02910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0xa7, 0x6}}, 0x28)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x5, 0xbb, 0x2, 0x7a8f})
r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r3, 0x0)

06:23:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa82502910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  570.586028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:17 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x5f)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:17 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x10, 0x1, 0x7, &(0x7f0000000000))
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="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")
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x148)
close(r0)

06:23:17 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)={0x7, [0x9, 0x1, 0x2784, 0xfffffffffffffffe, 0x8, 0x2ef7, 0x6]})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x6, 0x70, 0x2, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffffffc, 0x2800, 0x2, 0x2bf, 0x6, 0x3, 0x3f, 0x1000, 0x1, 0x9b7, 0x2, 0x6, 0x7, 0x3, 0x129, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x400, 0x2a7, 0x86c, 0x80000000, 0xff, 0x7, 0x1f, 0x8, 0xffffffff80000001, 0x7, 0xffffffffffff39ab, 0x54f, 0x6, 0x4, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0x4}, 0x80, 0x60, 0x508, 0x5, 0xffff, 0xb99, 0x3})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  570.721619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  570.734209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84802910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:17 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x401, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
close(r1)
close(0xffffffffffffffff)

[  570.762083] device nr0
 entered promiscuous mode
[  571.059149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.103000] device nr0
 entered promiscuous mode
[  571.234480] binder: BINDER_SET_CONTEXT_MGR already set
[  571.245509] binder: 26773:26828 ioctl 40046207 0 returned -16
[  571.258155] binder: BINDER_SET_CONTEXT_MGR already set
[  571.263578] binder: 26773:26784 ioctl 40046207 0 returned -16
[  571.269752] binder_alloc: 26773: binder_alloc_buf, no vma
[  571.276092] binder_release_work: 35 callbacks suppressed
06:23:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:18 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e22, @rand_addr=0x80000000}}}, 0x108)
recvmsg(r2, &(0x7f0000000880)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/111, 0x6f}], 0x7, &(0x7f0000000780)=""/193, 0xc1}, 0x40000042)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000008c0)=0x9, 0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:18 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84314910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x1)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000))
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x1, 0x4)
write$cgroup_pid(r2, &(0x7f0000000200), 0x9e0819dd)

[  571.276098] binder: undelivered TRANSACTION_ERROR: 29189
[  571.293578] binder: undelivered TRANSACTION_ERROR: 29189
06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84311910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:18 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x2032, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x88400, 0xc0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0)

[  571.381850] binder: 26833:26840 unknown command 0
[  571.401157] binder: 26833:26840 ioctl c0306201 20000140 returned -22
06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84303910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  571.430602] binder_alloc: binder_alloc_mmap_handler: 26833 20001000-20004000 already mapped failed -16
[  571.440710] binder: BINDER_SET_CONTEXT_MGR already set
[  571.462894] binder: 26833:26840 ioctl 40046207 0 returned -16
[  571.470538] binder: 26833:26843 unknown command 0
[  571.475828] binder: 26833:26850 got transaction to invalid handle
[  571.486092] binder: 26833:26843 ioctl c0306201 20000140 returned -22
[  571.492116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.493447] binder: undelivered TRANSACTION_ERROR: 29189
[  571.515395] binder: undelivered TRANSACTION_ERROR: 29201
06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84305910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  571.535524] binder: undelivered TRANSACTION_ERROR: 29189
06:23:18 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x810, r1, 0xfffffffffffffffe)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=<r3=>0x0, &(0x7f0000000140)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000180)}, &(0x7f0000000200)=0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)="f78f627bca4684558d0e517a5e75ed70da19eeea9948e2d9e3503f748d4a1d2bdcdb6817bd4117704ea177e7bf38aa012ceea12d4cb7b9668ff6a40741b8f935f8e0b4379e3bdba84193da5563a6193ea4e0cf9df2d0917603f688a4fdba0bfc7e2b940242f63827754252bd80f0d53554b10afd1c5bbca6755832c63e3d4a67ca2ccbc7fe5d523c52bd25b6")
getdents(r2, &(0x7f0000000240)=""/249, 0xf9)

06:23:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'ip6tnl0\x00', 0x2}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  571.564961] binder: undelivered TRANSACTION_ERROR: 29189
06:23:18 executing program 2:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600))
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRES32=r0], 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/sockstat6\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x5, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)})
mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)=r2)
fremovexattr(0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000480)={@multicast2, @empty, <r3=>0x0}, &(0x7f00000004c0)=0xc)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={r3}, 0xc)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000340), 0x0)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x5815322, 0x0, 0x0, 0x100000009b4b62b})
ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x17})
timer_create(0x7, &(0x7f0000000100)={0x0, 0x19, 0x1, @thr={&(0x7f0000000540)="5df93a3cf1d5f1986a08a35081ce8e64f8bc48fa5377fdffe800add9a41b9fd2168895fb5e5614ed10f67cd5db279024837b44673d4e4c5cd404d1c79379af2f6e833fab39b4fefad4f459863168a824ee1a5149da1ba6d98cb641ac8b144d7ea0b8fc6cd424412f7ff2377e1031a8d1aeb55bd0a66baf8ed73c91bb989ee0df6066137ca3a7926f0da8cb465e018427cbd0825ed38f815ab673cd11208c7f77dfa758dbb8aa556bdc28094da2a58fafbde2fef465385865b48f326a", &(0x7f0000000640)="9a2788a414ae960cb734b4354f2645aec133b90fe0f3f03e49e893fb575c513edb7eac10fb6d5a17d2617de005118a3e8f4e208e3bfc91ecefe7eae87a42145fa47c1b9f974638a1283f1c4df17df54e6fd961dc1b01146446841f3dd138f94d314655b9d7df45570289200aa5880290bdec6932bbe9fa5066f320c826402449906356b1798e84307ed3ed41ce4a0be9c745b932d354ebfe047a122a268cb2af532e7aae4d7497342227bea7d18e9e7f"}}, &(0x7f00000001c0)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f0000000300)={{0x77359400}, {r5, r6+30000000}}, &(0x7f0000000440))

06:23:18 executing program 5:
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[])
r0 = getpid()
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x8000000000000000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r2=>0x0)
sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280))
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="6e444d33a51e9f2d9e9fd1be89f123ce", 0x10)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000380)={@dev, <r4=>0x0}, &(0x7f0000000540)=0x14)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"000000000200", 0x5002})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000fbff000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x2007fff)
write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r3, r7, &(0x7f0000d83ff8), 0x800000000024)
r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f0000000580)}, 0x10)
getsockopt$inet6_dccp_int(r3, 0x21, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x4e21, 0xb, 0x0, 0x0, 0x0, 0xa0, 0xa0, 0x7f, r4}, {0x0, 0x1, 0x1000019, 0x596d, 0x96f3, 0x0, 0x1, 0x5}, {0x7, 0x7ff}, 0x29fcf899, 0x6e6bbf, 0x2, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d5, 0x3f}, 0x2, @in6=@loopback, 0x3506, 0x4, 0x2, 0x4, 0xa, 0x86, 0x100000000}}, 0xe8)
fdatasync(r8)

[  571.605977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.616364] binder: BINDER_SET_CONTEXT_MGR already set
[  571.622656] binder: 26859:26860 ioctl 40046207 0 returned -16
[  571.630565] binder: 26859:26862 got transaction to invalid handle
[  571.645098] binder_transaction: 19 callbacks suppressed
[  571.645115] binder: 26859:26862 transaction failed 29201/-22, size 0-0 line 2834
[  571.675767] binder: undelivered TRANSACTION_ERROR: 29189
[  571.681817] binder: undelivered TRANSACTION_ERROR: 29189
06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84348910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  571.704227] binder: undelivered TRANSACTION_ERROR: 29189
[  571.716977] binder: undelivered TRANSACTION_ERROR: 29201
06:23:18 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

06:23:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4, 0x61013, r0, 0x4)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x2, 0x10800)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000540))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x8001)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000580)={0x18, 0x0, {0x0, @remote, 'bond_slave_1\x00'}})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0)
write$P9_RLOPEN(r3, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x9, 0x1, 0x8}, 0x6}}, 0x18)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000380)="3ba6cd50e114eb782f25cfcac9094f33ab57d08cc10891b36ccedad9868d6243b93e57887fc929ff7731766186544d5a971a816975c5e768a1d6bdcaaf8e621eb469b693bfb2d1cb10c3eeb1adf39d2a16869c4683b892bee4936c6f03eb31617446", 0x62)
accept4$inet(r3, &(0x7f00000001c0), &(0x7f0000000280)=0x10, 0x80000)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  571.892355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  571.929823] binder: 26876:26879 ioctl 1 20000000 returned -22
06:23:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430b910009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:18 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket(0xf, 0x2, 0x8001)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0), 0x4)
syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0x4, 0x200000002})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  571.974951] binder: 26876:26879 transaction failed 29189/-3, size 0-0 line 2973
[  571.991589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  572.055810] binder: BINDER_SET_CONTEXT_MGR already set
[  572.088635] binder: 26876:26889 ioctl 40046207 0 returned -16
[  572.099689] binder: 26876:26879 transaction failed 29189/-3, size 24-8 line 2973
[  572.113864] binder: 26876:26893 ioctl 1 20000000 returned -22
[  572.129399] binder: 26876:26894 transaction failed 29189/-3, size 0-0 line 2973
[  572.142721] binder_thread_release: 1 callbacks suppressed
[  572.142732] binder: release 26876:26879 transaction 2522 in, still active
[  572.143478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.149681] binder_send_failed_reply: 2 callbacks suppressed
[  572.149690] binder: send failed reply for transaction 2522 to 26876:26879
[  572.193350] binder_release_work: 2 callbacks suppressed
[  572.193356] binder: undelivered TRANSACTION_COMPLETE
06:23:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000003, 0x80150, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d630000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000"], 0x0, 0x0, 0x0})

[  572.323380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:23:19 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x0)

06:23:19 executing program 5:
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[])
r0 = getpid()
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x8000000000000000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r2=>0x0)
sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280))
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="6e444d33a51e9f2d9e9fd1be89f123ce", 0x10)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000380)={@dev, <r4=>0x0}, &(0x7f0000000540)=0x14)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"000000000200", 0x5002})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000fbff000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x2007fff)
write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r3, r7, &(0x7f0000d83ff8), 0x800000000024)
r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f0000000580)}, 0x10)
getsockopt$inet6_dccp_int(r3, 0x21, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x4e21, 0xb, 0x0, 0x0, 0x0, 0xa0, 0xa0, 0x7f, r4}, {0x0, 0x1, 0x1000019, 0x596d, 0x96f3, 0x0, 0x1, 0x5}, {0x7, 0x7ff}, 0x29fcf899, 0x6e6bbf, 0x2, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d5, 0x3f}, 0x2, @in6=@loopback, 0x3506, 0x4, 0x2, 0x4, 0xa, 0x86, 0x100000000}}, 0xe8)
fdatasync(r8)

06:23:19 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910005003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  572.442115] binder: 26902:26906 transaction failed 29189/-3, size 24-8 line 2973
[  572.495539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.502613] binder: 26902:26912 unknown command 25373
[  572.508536] binder: 26902:26912 ioctl c0306201 20000140 returned -22
[  572.525712] binder: 26902:26906 unknown command 22
[  572.530710] binder: 26902:26906 ioctl c0306201 20000040 returned -22
06:23:19 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910709003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  572.547929] binder: BINDER_SET_CONTEXT_MGR already set
[  572.553420] binder: 26902:26912 ioctl 40046207 0 returned -16
[  572.561053] binder: 26902:26915 transaction failed 29189/-3, size 24-8 line 2973
[  572.570302] binder: 26902:26906 unknown command 25373
[  572.576391] binder: 26902:26912 unknown command 22
[  572.586264] binder: 26902:26906 ioctl c0306201 20000140 returned -22
[  572.593131] binder: 26902:26912 ioctl c0306201 20000040 returned -22
[  572.622926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:23:20 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fffffff, 0x200341)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0x5, @mcast1, 0x2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x1e)
perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc)

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910509003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffff51, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd3, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:20 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={<r3=>0x0, 0x9, 0x30, 0x4000000000000000, 0x4}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x1}, &(0x7f0000000140)=0x8)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

06:23:20 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1ff, 0x40)
r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x7fff0, 0x1)
renameat(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00')
clock_adjtime(0x5, &(0x7f0000000040)={0x1, 0xfffffffffffffe21, 0x1b3, 0x9, 0xa71, 0x6, 0x7f, 0x5, 0x3, 0x3, 0x40, 0xc5, 0x1, 0x8, 0x6d, 0x0, 0xfff, 0x80000000, 0x9, 0xffff, 0x0, 0x7, 0xfff, 0x7, 0x100000000, 0x8})
poll(&(0x7f0000000240)=[{r0, 0x4}, {r0, 0x1}, {r1, 0x400}, {r1, 0x50}], 0x4, 0x3)
mount(&(0x7f0000000000)=@sg0='u\ni!/#g0\x00', &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000d003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  573.150545] binder: 26930:26934 ioctl c0306201 200000c0 returned -14
[  573.155463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:20 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

[  573.214957] UBIFS error (pid: 26941): cannot open "u
[  573.214957] i!/#g0", error -22
[  573.228516] binder: 26930:26945 got transaction to invalid handle
[  573.250083] UBIFS error (pid: 26941): cannot open "u
[  573.250083] i!/#g0", error -22
[  573.258923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:20 executing program 2:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2f)
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0xc070, 0x0)
faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0)
r1 = accept$packet(r0, &(0x7f0000000080), &(0x7f0000000180)=0x14)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000240)=""/231, 0x8})
accept4(r0, &(0x7f0000000380)=@in={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x80, 0x80800)
sendto$unix(r0, &(0x7f0000000040)="6862497cdc89ac83e3b83664cdfad7753b0d0cd5928a04e9b7910efc2601", 0x1e, 0x80, &(0x7f0000000100)=@file={0x0, './control\x00'}, 0x6e)

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910a09003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  573.259075] binder: 26930:26945 transaction failed 29201/-22, size 0-0 line 2834
06:23:20 executing program 5:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0xa, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x20000252, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000000000000006000000850000000a000000181f0000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000005db700000c70fefff0ffffff850000003f000010"], &(0x7f0000f6bffb)='GPL\x00'}, 0x3a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_emit_ethernet(0x11, &(0x7f0000000340)={@remote, @random="50c719c32a45", [], {@x25}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4080, 0x128)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x4, 0x1}, 0x14}, 0x10)

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000b003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:20 executing program 2:
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r2 = socket(0x11, 0x80002, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000280))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4)
bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5)
r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x1500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000001580)={@multicast1, @empty, <r5=>0x0}, &(0x7f0000000140))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6}}}, &(0x7f0000001700)=0xe8)
r8 = creat(&(0x7f0000000400)='./file0\x00', 0x10)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2cffffffff6fda", @ANYRESHEX=r1, @ANYBLOB=',cache=loose,measure,\x00'])
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001740)={{{@in6, @in, 0x4e24, 0x2, 0x4e23, 0x7f, 0x0, 0xa0, 0x20, 0x89, r5, r7}, {0xff, 0x1, 0x100, 0x7fffffff, 0x830, 0x1, 0xfffffffffffffc01, 0xffffffffffffb40d}, {0x120, 0x3, 0x7fff, 0x7}, 0xffffffff, 0x6e6bb3, 0x2, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x7db07d54674a3a5}, 0x2, @in=@rand_addr=0x6, 0x3501, 0x7, 0x3, 0x5, 0x0, 0x2, 0x935}}, 0xe8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xff, 0x0)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101001, 0x0)
ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002)
sendto$packet(r3, &(0x7f00000002c0)="fde4f5a6006491d5e934de88729de90d9ea77bb475e92cf330b7512a8c3e4e7f51626de17f17371e4c4a0eb9269a83da4790abae62dd0cb7f13c1c40f9ec3cd8e4d43ec6bb7b0cf246186709f98c0dd454", 0x51, 0x4000010, &(0x7f0000000340)={0x11, 0xf7, r6, 0x1, 0x8, 0x6, @local}, 0x14)
ioctl(r9, 0x6, &(0x7f00000001c0)="ee854bbf445ebc43033330cbb0b96b1720a6a5bf223325a71f10c6946796460d58d86de0bb45309abcd4c9f9bbb75b98c0ee4ccbc98b030f7bfdc9651ec3373b2128bc774a750c7c43c3910ccd0d0f9620b4e69b417ed142e4c57903504aa9bbf34b7d6a780f613737f3d21c7c3da1b69970c310cf6f3b1ee786acd5ad7335c771b11b047906f84bc01a0fcb62310d883127b0b7e6878c84a32602c5c7a6d2e47fbfd8d5bc0d3f7892ea66ebd54d5227818577c37c35e0ba877c769777b9baad99cc3a79c78e56ab14e39823eb49aabd1b5a92b0cf5eeea6d6ae4af014cf5d455996372f577ad7e0ac28c1b5e5ea6f6f17")
pipe(&(0x7f0000000000))

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910007003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  573.448678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  573.512473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  573.589839] 9pnet: Insufficient options for proto=fd
[  573.935026] binder_alloc_mmap_handler: 2 callbacks suppressed
[  573.935044] binder_alloc: binder_alloc_mmap_handler: 26930 20001000-20004000 already mapped failed -16
[  573.951450] binder: BINDER_SET_CONTEXT_MGR already set
[  573.957228] binder: 26930:26945 ioctl 40046207 0 returned -16
[  573.963797] binder: 26930:26976 ioctl c0306201 200000c0 returned -14
06:23:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(r0, 0x9)
ptrace$pokeuser(0x6, r1, 0x400000325a5c3, 0x8)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/214, 0xd6}, {&(0x7f0000000180)=""/51, 0x33}], 0x5)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x6, 0x0, 0x1, 0x0, 0x0, [{r2, 0x0, 0x3}]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x4)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4a080020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1ec, r4, 0x310, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800000000000000}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfff, @remote, 0x5f47}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x94)

06:23:20 executing program 5:
r0 = socket$kcm(0x11, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040)={0x4, 0x40, 0x4, 0x8, 0x7ff, 0xffffffff, 0x2, 0x2}, &(0x7f0000000080)={0x89c, 0x10000, 0x5b, 0x7ff, 0x9, 0xb57, 0x840, 0x800}, &(0x7f00000000c0)={0x80000001, 0xaed0, 0x2, 0x10000, 0x4, 0x8, 0x9, 0xffffffff}, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x6}, 0x8})
sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000240)=@nfc={0x27, 0x3}, 0x80}, 0x0)
ustat(0x3, &(0x7f0000000200))

06:23:20 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0)
getsockopt$inet6_dccp_buf(r2, 0x21, 0xce, &(0x7f0000000040), &(0x7f0000000080))
write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910209003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910609003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1000000000000a, 0x80000000001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000140027990000000000b5000002000000", @ANYRES32=r2, @ANYBLOB="080003000000000008000200ffffffff"], 0x28}}, 0x0)

[  574.150295] binder_alloc_new_buf_locked: 9 callbacks suppressed
[  574.150303] binder_alloc: 26984: binder_alloc_buf, no vma
[  574.201146] binder: 26984:26987 transaction failed 29189/-3, size 0-0 line 2973
[  574.231300] binder_alloc: binder_alloc_mmap_handler: 26984 20001000-20004000 already mapped failed -16
06:23:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910f09003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  574.260619] binder: BINDER_SET_CONTEXT_MGR already set
[  574.266979] binder_alloc: 26984: binder_alloc_buf, no vma
[  574.272711] binder: 26984:26987 ioctl 40046207 0 returned -16
[  574.279281] binder: 26984:26990 transaction failed 29189/-3, size 24-8 line 2973
[  574.295971] binder_alloc: 26984: binder_alloc_buf, no vma
[  574.307047] binder: 26984:26990 transaction failed 29189/-3, size 0-0 line 2973
06:23:21 executing program 5:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000880)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x802d, 'cpu'}]}, 0x5)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5)

[  574.331816] binder: release 26984:26987 transaction 2534 in, still active
[  574.346225] binder: send failed reply for transaction 2534 to 26984:26987
06:23:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910309003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  574.404515] binder: undelivered TRANSACTION_COMPLETE
[  574.613793] 9pnet: Insufficient options for proto=fd
06:23:21 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0xfffffffffffffffe, 0x1, {{0x0, 0x2, 0x4, 0x6, 0x0, 0x81, {0x5, 0x2, 0x2, 0x0, 0x4, 0x1, 0x3, 0x0, 0x50cb, 0x6, 0x0, r3, r4, 0x697d155c, 0x8}}, {0x0, 0x1}}}, 0xa0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040))
recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/14, 0xe}], 0x5, &(0x7f0000000400)=""/51, 0x33}, 0x40000002)

06:23:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="85260e5ae0000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="83c56c11c52c22f3c360a0008f5466611f6cf0015ab5a81d9f061b2fd891c1099968657fc15ca4324acfd3ee29a1b8cd86a1f68e831e9d3815e0a63db8a824f01d4e0e01ef50e520fae3c0ae85139ad23fd45e498d6c58b59e973cb8ac0e8ca881b83708505c56567c2f42c34f166b26ddb13ef5d924d1248efe1c280fe1c57987a88386d0188599902474af7f0e0b86162e9503a1a8b44fa6a1aceaeef7ce6527a868e0a8062827e887bf7e0fea64f496c76519e95def0f3d2b1e804c4499f6901d026c54592700ca74310167dd"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910909003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

[  574.641442] dccp_close: ABORT with 81 bytes unread
06:23:21 executing program 5:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423)
socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e3c3"])
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0x8090ae81, 0x710000)
clone(0x100200020fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='dax\x00', 0x0, 0x0)

06:23:21 executing program 2:
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x8c)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r2 = socket(0x11, 0x80002, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000280))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4)
bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5)
r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x1500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000001580)={@multicast1, @empty, <r5=>0x0}, &(0x7f0000000140))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6}}}, &(0x7f0000001700)=0xe8)
r8 = creat(&(0x7f0000000400)='./file0\x00', 0x10)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2cffffffff6fda", @ANYRESHEX=r1, @ANYBLOB=',cache=loose,measure,\x00'])
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001740)={{{@in6, @in, 0x4e24, 0x2, 0x4e23, 0x7f, 0x0, 0xa0, 0x20, 0x89, r5, r7}, {0xff, 0x1, 0x100, 0x7fffffff, 0x830, 0x1, 0xfffffffffffffc01, 0xffffffffffffb40d}, {0x120, 0x3, 0x7fff, 0x7}, 0xffffffff, 0x6e6bb3, 0x2, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x7db07d54674a3a5}, 0x2, @in=@rand_addr=0x6, 0x3501, 0x7, 0x3, 0x5, 0x0, 0x2, 0x935}}, 0xe8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xff, 0x0)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101001, 0x0)
ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002)
sendto$packet(r3, &(0x7f00000002c0)="fde4f5a6006491d5e934de88729de90d9ea77bb475e92cf330b7512a8c3e4e7f51626de17f17371e4c4a0eb9269a83da4790abae62dd0cb7f13c1c40f9ec3cd8e4d43ec6bb7b0cf246186709f98c0dd454", 0x51, 0x4000010, &(0x7f0000000340)={0x11, 0xf7, r6, 0x1, 0x8, 0x6, @local}, 0x14)
ioctl(r9, 0x6, &(0x7f00000001c0)="ee854bbf445ebc43033330cbb0b96b1720a6a5bf223325a71f10c6946796460d58d86de0bb45309abcd4c9f9bbb75b98c0ee4ccbc98b030f7bfdc9651ec3373b2128bc774a750c7c43c3910ccd0d0f9620b4e69b417ed142e4c57903504aa9bbf34b7d6a780f613737f3d21c7c3da1b69970c310cf6f3b1ee786acd5ad7335c771b11b047906f84bc01a0fcb62310d883127b0b7e6878c84a32602c5c7a6d2e47fbfd8d5bc0d3f7892ea66ebd54d5227818577c37c35e0ba877c769777b9baad99cc3a79c78e56ab14e39823eb49aabd1b5a92b0cf5eeea6d6ae4af014cf5d455996372f577ad7e0ac28c1b5e5ea6f6f17")
pipe(&(0x7f0000000000))

[  574.699431] binder: 27018:27020 got transaction with invalid offset (0, min 0 max 24) or object.
[  574.719398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.740239] binder: 27018:27020 unknown command 292341123
06:23:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

[  574.747772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.754543] binder: 27018:27020 ioctl c0306201 20000140 returned -22
[  574.762710] binder: 27018:27020 got transaction to invalid handle
06:23:21 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  574.791219] binder_alloc: binder_alloc_mmap_handler: 27018 20001000-20004000 already mapped failed -16
[  574.837975] 9pnet: Insufficient options for proto=fd
06:23:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910014003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  574.861178] binder: BINDER_SET_CONTEXT_MGR already set
[  574.869831] binder: 27018:27020 ioctl 40046207 0 returned -16
[  574.884499] binder_alloc: 27018: binder_alloc_buf, no vma
[  574.895625] binder: 27018:27031 got transaction to invalid handle
06:23:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

[  574.907095] binder: 27018:27020 unknown command 292341123
[  574.921654] binder: 27018:27020 ioctl c0306201 20000140 returned -22
06:23:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000d, 0x82050, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:21 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1c000000, 0x40601)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x10000000})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  574.996422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  575.024828] binder_alloc: 27047: binder_alloc_buf, no vma
06:23:22 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910006003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  575.060843] binder_alloc: binder_alloc_mmap_handler: 27047 20001000-20004000 already mapped failed -16
[  575.098216] binder: BINDER_SET_CONTEXT_MGR already set
[  575.122348] binder: 27047:27049 ioctl 40046207 0 returned -16
[  575.151252] binder_alloc: 27047: binder_alloc_buf, no vma
06:23:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

06:23:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x2, "819bbb2c841c8370"})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  575.169537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  575.171129] binder: 27047:27051 got transaction to invalid handle
[  575.195892] binder: release 27047:27049 transaction 2546 out, still active
[  575.211235] binder: unexpected work type, 4, not freed
06:23:22 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910020003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  575.238143] binder: undelivered TRANSACTION_COMPLETE
[  575.262934] binder: release 27047:27049 transaction 2546 in, still active
[  575.292557] binder: send failed reply for transaction 2546, target dead
[  575.359132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

06:23:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0x3dc, &(0x7f0000ffe000/0x1000)=nil, 0x2)
r2 = socket$netlink(0x10, 0x3, 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'sit0\x00', 0x2000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634050000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f00000000c0)=""/21, 0x93)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:22 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302911009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:22 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0xfffffffffffffffe, 0x1, {{0x0, 0x2, 0x4, 0x6, 0x0, 0x81, {0x5, 0x2, 0x2, 0x0, 0x4, 0x1, 0x3, 0x0, 0x50cb, 0x6, 0x0, r3, r4, 0x697d155c, 0x8}}, {0x0, 0x1}}}, 0xa0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040))
recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/14, 0xe}], 0x5, &(0x7f0000000400)=""/51, 0x33}, 0x40000002)

06:23:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10)
close(r0)
prctl$PR_SET_PDEATHSIG(0x1, 0x17)

[  575.633286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

06:23:22 executing program 2:
r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
write$P9_RSTATFS(r0, &(0x7f0000000400)={0x43, 0x9, 0x0, {0x1000}}, 0x43)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)})
mount$9p_xen(&(0x7f0000000180)=',\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xa00004, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d78656e2c6d8e61702c76657273696f6e3d3970323030302c63616368657461673d76626f786e65743076626f786e6574306d643573756d3a6d696d655f74797065262d766d6e657430757365722c7063723d30303030303030303030303030303030303034382c7375626a5f747970653d747275737465642e6f7665726c61792e6e6c696e6b002c726f6f74636f6e746578743d73746166665f752c00"])
utimes(0x0, &(0x7f0000000140))
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x0, @rand_addr=0xf0f, 0x4e23, 0x2, 'nq\x00', 0x2, 0xfffffffffffffffd, 0x4b}, {@local, 0x4e24, 0x2, 0x2, 0xfc21, 0x7ff}}, 0x44)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xf3}, 0x28, 0x2)

06:23:22 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302911209003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  575.703506] binder: 27083:27089 unknown command 1346396928
[  575.712591] binder: 27083:27089 ioctl c0306201 200000c0 returned -22
[  575.781820] binder: 27083:27101 got transaction to invalid handle
06:23:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:23:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10)
close(r0)
prctl$PR_SET_PDEATHSIG(0x1, 0x17)

06:23:22 executing program 2:
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x1, 0x10001, [{0xa00, 0x0, 0x7fffffff}]})
r2 = socket$inet(0x10, 0x2003, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000002e0007041dfffd946fa2830020200a0009000000001d8568ff0f009effffff00280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

06:23:22 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8000000000, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  576.449559] binder_alloc: binder_alloc_mmap_handler: 27083 20001000-20004000 already mapped failed -16
[  576.465819] binder: BINDER_SET_CONTEXT_MGR already set
[  576.471353] binder: 27083:27126 ioctl 40046207 0 returned -16
[  576.478220] binder: 27083:27101 unknown command 1346396928
[  576.483935] binder: 27083:27101 ioctl c0306201 200000c0 returned -22
06:23:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:23 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910409003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:23 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

06:23:23 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
prlimit64(r2, 0x0, &(0x7f00000004c0)={0x0, 0x7ffffd}, &(0x7f00000002c0))
lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)=@random={'trusted.', 'bpf\x00'})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x800)
recvfrom(r3, &(0x7f0000000500)=""/96, 0x60, 0x20, &(0x7f00000005c0)=@ipx={0x4, 0x1, 0x6, "6b183128f377"}, 0x80)
mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[])
r4 = msgget$private(0x0, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @loopback}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380), 0x1)
r6 = getegid()
r7 = getuid()
r8 = getgid()
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0xffff, r5, r6, r7, r8, 0x1c, 0x10001}, 0x40, 0x7, 0x0, 0x1, 0xd4, 0x8e, r2, r2})
msgget$private(0x0, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x700, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB])
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000240), 0x0)
fstat(0xffffffffffffffff, &(0x7f00000006c0))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x80}, &(0x7f00000001c0)=0xfffffffffffffd3f)
ioctl$FICLONE(r1, 0x40049409, r3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0)

06:23:23 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
renameat(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')

06:23:23 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40000)
ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000040)={0x400, 0xb3})

[  576.523627] binder_release_work: 18 callbacks suppressed
[  576.523632] binder: undelivered TRANSACTION_ERROR: 29201
[  576.564548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  576.628517] overlayfs: failed to resolve './file1': -2
[  576.647515] binder_alloc: 27137: binder_alloc_buf, no vma
06:23:23 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

[  576.671094] overlayfs: failed to resolve './file1': -2
06:23:23 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302916009003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:23 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x260000, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc81c48}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa230af5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @remote, 0xffffffffffff4ec4}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x40001)

[  576.692807] binder_transaction: 8 callbacks suppressed
[  576.692828] binder: 27137:27140 transaction failed 29189/-3, size 0-0 line 2973
[  576.722506] binder_alloc: binder_alloc_mmap_handler: 27137 20001000-20004000 already mapped failed -16
06:23:23 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x80000000, 0x0)
ioctl(r0, 0xffffffffffffffb8, &(0x7f0000000000))

[  576.793716] binder: BINDER_SET_CONTEXT_MGR already set
06:23:23 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

[  576.818132] binder: 27137:27140 ioctl 40046207 0 returned -16
[  576.829389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  576.844125] binder_alloc: 27137: binder_alloc_buf, no vma
[  576.880250] binder: 27137:27159 transaction failed 29189/-3, size 24-8 line 2973
[  576.899819] binder: 27137:27147 got transaction to invalid handle
06:23:23 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000a003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  576.927123] binder: 27137:27147 transaction failed 29201/-22, size 0-0 line 2834
[  576.968206] binder: undelivered TRANSACTION_ERROR: 29201
[  577.002410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = dup2(r0, r1)
ioctl$NBD_SET_SIZE(r2, 0xab02, 0x80)
write$P9_RFLUSH(r2, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000c79f047be187eca4c6a969ef086d35f3dcb3c9a895cee42efcc3dd30e4be4111be36f3bdde4ce495de6aecc6b5a731390c570174ba95bf19de5d203a1b9a7cb44f213b79cc37396cc0051dea1f750c67eaefa270e6e3bf98acde60bd87768909eb6e07a0bdb6482ad082e484055ed4a80fa0801eff3412511aed5488a8a960", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xc8, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40f2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1067}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x44e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffd0287d4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11c3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040001}, 0x4044)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000580)={0x5, 0x3, @raw_data=[0x1, 0x55c2, 0x9, 0x9, 0x8001, 0x800, 0x9, 0x9, 0x1, 0x2, 0x6000000000000000, 0x7fff, 0x7, 0x7fff80000000000, 0x0, 0x830e]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:24 executing program 3:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x8000)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0xd6d, 0x0, 0x5})
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r3, 0x104, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0ca}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffe00000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46fb}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32c7872e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
close(r0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
fcntl$setstatus(r1, 0x4, 0x2000)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000d10000000000e9ff0700000000000054fa07424adee916d2da75afe75b1fe8afb44ee8df0b35a0fd6a1f0200d3ab26d7a071fb35331ce39c5a6568641006d7c0206a740000")
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)
prctl$PR_GET_TIMERSLACK(0x1e)

[  577.025806] binder: undelivered TRANSACTION_ERROR: 29189
[  577.031521] binder: release 27137:27140 transaction 2555 in, still active
[  577.116732] binder: send failed reply for transaction 2555 to 27137:27140
[  577.123767] binder: undelivered TRANSACTION_ERROR: 29189
[  577.137079] binder: 27175:27178 ioctl ab02 80 returned -22
[  577.144092] binder: undelivered TRANSACTION_COMPLETE
[  577.155383] binder: undelivered TRANSACTION_ERROR: 29189
[  577.161898] binder: 27175:27178 got transaction to context manager from process owning it
[  577.204278] binder: 27175:27178 transaction failed 29201/-22, size 24-0 line 2825
[  577.256125] binder: 27175:27178 ioctl c0485660 20000580 returned -22
[  577.281399] binder: 27175:27178 got transaction to invalid handle
[  577.309370] binder: 27175:27178 transaction failed 29201/-22, size 0-0 line 2834
[  577.340723] binder: 27175:27182 ioctl ab02 80 returned -22
[  577.362194] binder: BINDER_SET_CONTEXT_MGR already set
[  577.383869] binder: 27175:27182 ioctl 40046207 0 returned -16
[  577.415495] binder_alloc: 27175: binder_alloc_buf, no vma
[  577.423595] binder: 27175:27178 transaction failed 29189/-3, size 24-0 line 2973
[  577.431897] binder: 27175:27184 ioctl c0485660 20000580 returned -22
[  577.444575] binder: undelivered TRANSACTION_ERROR: 29201
[  577.453755] binder: undelivered TRANSACTION_ERROR: 29189
06:23:24 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
prlimit64(r2, 0x0, &(0x7f00000004c0)={0x0, 0x7ffffd}, &(0x7f00000002c0))
lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)=@random={'trusted.', 'bpf\x00'})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x800)
recvfrom(r3, &(0x7f0000000500)=""/96, 0x60, 0x20, &(0x7f00000005c0)=@ipx={0x4, 0x1, 0x6, "6b183128f377"}, 0x80)
mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[])
r4 = msgget$private(0x0, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @loopback}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380), 0x1)
r6 = getegid()
r7 = getuid()
r8 = getgid()
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0xffff, r5, r6, r7, r8, 0x1c, 0x10001}, 0x40, 0x7, 0x0, 0x1, 0xd4, 0x8e, r2, r2})
msgget$private(0x0, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x700, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB])
getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000240), 0x0)
fstat(0xffffffffffffffff, &(0x7f00000006c0))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x80}, &(0x7f00000001c0)=0xfffffffffffffd3f)
ioctl$FICLONE(r1, 0x40049409, r3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0)

06:23:24 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:23:24 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910048003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:24 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={<r3=>0x0, 0x6}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x3, 0x7, 0x8001, r3}, &(0x7f0000000100)=0x10)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={<r3=>0x0, 0x8}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x78}, 0x8)

[  577.498578] EXT4-fs (sda1): Unrecognized mount option "./file0" or missing value
[  577.626154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  577.639094] binder_alloc: 27197: binder_alloc_buf, no vma
06:23:24 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:23:24 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910809003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  577.724202] binder: 27197:27200 transaction failed 29189/-3, size 0-0 line 2973
06:23:24 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800, 0x0)
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xd, 0x10001, 0x7ff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  577.772527] binder: release 27197:27200 transaction 2566 in, still active
[  577.780637] binder: 27197:27208 transaction failed 29189/-3, size 0-0 line 2973
[  577.790649] binder: send failed reply for transaction 2566 to 27197:27200
[  577.801354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  577.811118] binder: undelivered TRANSACTION_ERROR: 29189
06:23:24 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

[  577.872485] binder: release 27197:27208 transaction 2570 out, still active
[  577.888551] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
06:23:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:24 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910b09003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  577.925724] binder: unexpected work type, 4, not freed
[  577.942955] binder: undelivered TRANSACTION_COMPLETE
[  577.964448] binder: unexpected work type, 4, not freed
[  577.981648] binder: undelivered TRANSACTION_COMPLETE
06:23:25 executing program 2:
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='lp\x00', 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0x7fff, 0x0, 0x0, 0x100})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$inet6(0xa, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xb3c, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x4], 0x0, 0x680})
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000200)={0x8bd, "6231f51c5ac21ab304380d0edb58de1bec2e0b76dbb5be2aaa11d34eef3ce642", 0x2, 0x7ff, 0x3, 0xb010, 0x1, 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0)

06:23:25 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xca, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0x14, 0x5, "11cd89169fdc04fb97e067040d642b7c308c91f9e200519f2dd4384f927b37f55522e35adaa6589d7d7865297b7e6fc9fc678779a54ab896906701c4ae31a47d", "27c0a4b82fd8dab474712756f814752301da37997bfd2cf4310bdb70f59104416dd3cafb6a29b89f292818f33d0443b3c43babffac830a4420da2304b53dadd5", "cada003d4981978d9e6ecd5fc4a6a5e5bcfdaf38e23464a3564766f3ed662396", [0x1, 0x6]})

06:23:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  578.051210] binder: undelivered TRANSACTION_ERROR: 29189
[  578.073662] binder: 27222:27226 transaction failed 29189/-3, size 0-0 line 2973
[  578.092909] binder: release 27197:27204 transaction 2570 in, still active
[  578.118384] binder: send failed reply for transaction 2570, target dead
[  578.127290] binder_alloc: binder_alloc_mmap_handler: 27222 20001000-20004000 already mapped failed -16
[  578.151651] binder: undelivered TRANSACTION_ERROR: 29189
06:23:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

[  578.166146] binder: BINDER_SET_CONTEXT_MGR already set
06:23:25 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302911109003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:25 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x80000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  578.208086] binder: 27222:27226 ioctl 40046207 0 returned -16
06:23:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

[  578.256425] binder: 27222:27246 transaction failed 29189/-3, size 24-8 line 2973
06:23:25 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  578.297182] binder: 27222:27231 got transaction to invalid handle
[  578.313614] binder: release 27222:27226 transaction 2575 out, still active
[  578.330113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  578.341301] binder: unexpected work type, 4, not freed
[  578.369211] binder: undelivered TRANSACTION_COMPLETE
06:23:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="156b060001"], 0x0, 0x0, 0x0})

06:23:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

[  578.398373] binder: release 27222:27226 transaction 2575 in, still active
[  578.425662] binder: send failed reply for transaction 2575, target dead
[  578.491252] binder: 27264:27266 unknown command 420629
06:23:25 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910011003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  578.519527] binder: 27264:27266 ioctl c0306201 20000040 returned -22
[  578.590219] binder_alloc: binder_alloc_mmap_handler: 27264 20001000-20004000 already mapped failed -16
[  578.649579] binder: BINDER_SET_CONTEXT_MGR already set
06:23:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

[  578.687218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  578.693145] binder: 27264:27266 ioctl 40046207 0 returned -16
[  578.697232] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  578.725055] binder: 27264:27275 unknown command 420629
[  578.740358] gfs2: fsid=dh: Now mounting FS...
[  578.756394] binder: 27264:27275 ioctl c0306201 20000040 returned -22
[  578.784600] gfs2: not a GFS2 filesystem
[  578.785696] binder: release 27264:27266 transaction 2582 out, still active
[  578.805188] binder: unexpected work type, 4, not freed
[  578.812753] gfs2: fsid=dh: can't read superblock
[  578.838461] binder: undelivered TRANSACTION_COMPLETE
[  578.860750] binder: release 27264:27266 transaction 2582 in, still active
[  578.875580] gfs2: fsid=dh: can't read superblock: -22
[  578.890860] binder: send failed reply for transaction 2582, target dead
06:23:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400400, 0x0)
sendto$llc(r1, &(0x7f00000001c0)="fb5b9efa737e4037d01b1428e240f2dbbecafcc2946dc2052f14e54984ba71d1dda596a835e92b4944d296088ec3602abcf5ee2aa347545a92472b1421427556f99a7fd71494790a058e63961e7df7bc174c3116b63d4f3334a143c142f4eec8674727a3cf713ece6f6894f68f401b47278474eedb7bf943eba76f942d9b3a1ad2", 0x81, 0x8000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x8000000003, 0x0, "8b63e98a6e9a990ceacccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b"}, 0x392)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "521353f37d010000000000b359add4f6c8150a2883eda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918571393a71edee23825d021cc14f2ea200000080000000009cfd00"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x1, 0x0, "50c03330675cd14b55d31a1d2e51ed198ad0c68d87df9a34443b8512f21737bbd8d530e303431746c4e996b44fd26c3793141dc689b1fe9e709167ab7e9f3e000f85993552819cc266c7c377a2255869"}, 0xd8)

06:23:26 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302911309003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:26 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00c@@>'], 0x0, 0x0, 0x0})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000018c0)=<r3=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000001a00)=0xe8)
fstat(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = gettid()
r7 = getuid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000001b00)=0xc)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001b40)=<r9=>0x0)
r10 = geteuid()
stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getpgid(0xffffffffffffffff)
getresuid(&(0x7f0000003300), &(0x7f0000003340)=<r13=>0x0, &(0x7f0000003380))
r14 = getgid()
r15 = getpgrp(0xffffffffffffffff)
r16 = getuid()
getresgid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)=<r17=>0x0)
r18 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003480)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000003580)=0xe8)
r20 = getegid()
sendmmsg$unix(r2, &(0x7f0000003680)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000540)="2382b1b0c18cce969528e8249b326e7ec7a6f4124cd5f088bae79f280e3d1f40380a0473521d3a7caf78677b09055a6db71fa78d97dff6aa005e2bedb3ad439e295bb4ac8c7a839634e7efe6db00aa3cd385e19e74dd120b5e73ca549ecf87d5c5bb1163d17cb6ab925e625def6d594c8b3328d0e2fe0d26b4cfcdc92429ae7c8359e9611d27f01e362761fb8cb14bfbbea7c5fc2f2b7d074d7a54dd3995053e9bb3945e715a568713b8a40f45a3c57f730fe19206462b732d323dd0cbfa3614daa999bd06663b973df5e8f8b1f1701cfb604518b3546f2ad809805f8b41825d37b4d54cb3db6411fa2ed4f82b2529d99fc15f20f4529b", 0xf7}, {&(0x7f0000000640)="d8a1a40f625f3fdc068de386983f3e7859841959f7d952856522", 0x1a}, {&(0x7f0000000680)="b32a24ee66005856e771d892de3593dbdc48d6b18072cd1d40e6fde814cbf053bb988fb7c3d5db2ad3226f8ca5b9de35a866c367438e79844e41f6720c7f12f77814c65bdf3a2d89a61e0856f3e6b6cb482e4b46f961a8b232b96013c888e7440465d7eb00551489a09fd6cc96f58d77b0c5352c95d6fa20ce3868465f68d1d4eb695659f8b6c0189bea8169d966a5ba0da3a55546342b9c7e3e3f4e1c573ea0d053923d25a3dc87c76e379ade2b72643b2618f947442ce31349eca485345865298d797c7c598d3a0c", 0xc9}], 0x4, &(0x7f00000007c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r2, r0]}], 0x28, 0x4010}, {&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f0000001c40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r1, r2, r2, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r2]}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r2, r1, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0xf0, 0x10}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000001dc0)="cbaef214443cca84462a2d9cded219", 0xf}, {&(0x7f0000001e00)="5bcc2653d7ca44df024d9891cdffba20438686ffaaed77edce3b32d122e6b99a2b7af183e6ffde36f94b1037f06fe8e804e7868398593aa7cad6860f305e137f8647625b71eb5d1f8a757379e59d76f3f2cc3c337fc8d9ecf5c438fa2d2df88889f37694e7fc5b336391ba5e79c8fea21ecd6b13c02f53c30303b4605c05e7d863d1de154617cae663589d365d30ac2d15ac6b2ee6417118ee78208a9b3ad8dc5c3ae61789cfd7b00287dbf2693ecedba9ebc506c4199dabc305623949", 0xbd}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="c0b677e389071711c32419b1021925ae9c", 0x11}, {&(0x7f0000002f00)="4b526b57a745ae835e5a27fae4ca338ea54d1254b4ef557b97ddc133d0d836c8e5af40f9ec057c29a117801c8ed4eacd03b9a72597ac0c9de8e024caf0b4f7be6fe3656190b859196e09b8c2eb7a53c714e0ed43e8c187d94d95a8c2e9003bbafca15366", 0x64}, {&(0x7f0000002f80)="7814180a9321413d8e2ab67c2f225553dcc1fcbb9196aedc2ce7373654daf3911ca7c1ef8bd3b61b45aa678a463e8c13d551dac83eef1c5501ea5028412f41929246cb163fffca1d559508e1478b78512c5f4bd632fe432cbb82fc38172be61f7e74ee13711cf70400ac6f88117272b08fb1a5ecd98ce3ae1a0c036fffd1447dd68a9e8a3253dd4a73d2b0a0714cb99d517046693dcfde8b474509183dbd932a3706911560242bf663af", 0xaa}, {&(0x7f0000003040)="8f3f6c1266e8158d9ea84d28732fa1f61fa72c155cde6057f66267a985ae711afb9714a5cc221fa89dc121fad8a048f643bab61fb3415cc30e2f143d9ca171f2a14bc4efe6b6", 0x46}, {&(0x7f00000030c0)="c28f251b8310504f566439f657d9b3092f3c4d93284dc5c1f5568dbbfc69248023cb0de0c2e461a7a7975a2737c43ea4b78e8fce259484add4f9bf7a87cefe41b976f3c4b793b57fab9f99f44c9cf5c6223925c119093181d6f05701c8dc67f1c79aa925af4b06b81c1058a2972416e721c4ab92f880b33319b7f7871bb8a444d8d9dcd0ceb5b23077c18292579241ec279e18195b435b0a1d601da4f0746dd1d72f2f6d223aba6e81b6c4bd0923b66d64edd32c07b79950af0c0bfc47286fe9", 0xc0}, {&(0x7f0000003180)="51a41875822bd87ddf9ad19adee271848f5ce95ab9fdb9cfe2f120ac0fc04bee61c204e79b313ec156be34df5e15a4aa02efb10c1a5d6bb938d9eff80bc7935f8f08f818374fce234a0eb1c7f9f45134732dd8c53fa5d2fc17b88baa8b3ff822fcd3213acb3e1ef8a53c18f8f96bf1cec788e77c0eb444803a4b01b4f29b76fd733486253c06ee67c93249b97894818ad4b2fb7c760685ec2f9d0e85f601dc36", 0xa0}], 0x9, &(0x7f00000035c0)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x28, 0x1, 0x1, [r0, r2, r0, r2, r2, r2]}, @rights={0x20, 0x1, 0x1, [r2, r2, r0]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0xc0, 0x80}], 0x3, 0x4000)
getsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

06:23:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:23:26 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910003003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  579.186235] binder: 27292:27294 got transaction to invalid handle
06:23:26 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000ac0)="1a8c443d3a568c81cc096aa88bdab0f1b182da383fd71795f41053261e63b0716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f2fa371596cdf17e160c992140c9dc81362f019f017477ab15b28dd6628d1ce0e124970150edf7f23268b6961ad6aa8a8cd1aa1794bf100000000000000000000adb83d5c98e9ad2205b03c0d62bc066f1fe130f363044b7a804be47d5731ad5b5be2b77b0a1bfbd6d8754bbd601b9b743ff01c72942b8282c0a5a8baeddf3c7d7415bfa95e78c991e555c02eb4883ac0dc5d7e9b", 0xf7, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000040)='W', 0x1)
readv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/193, 0xc1}], 0x1)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/226, 0xe2}], 0x1)
close(r0)

[  579.228398] binder_alloc: binder_alloc_mmap_handler: 27292 20001000-20004000 already mapped failed -16
06:23:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:26 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x331, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88c000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x9, 0x1, 0x5)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  579.296469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  579.301508] binder: BINDER_SET_CONTEXT_MGR already set
06:23:26 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291001d003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  579.369546] binder: 27292:27294 ioctl 40046207 0 returned -16
[  579.401198] binder_alloc_new_buf_locked: 4 callbacks suppressed
[  579.401207] binder_alloc: 27292: binder_alloc_buf, no vma
[  579.425852] binder: 27292:27320 got transaction to invalid handle
06:23:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:23:26 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  579.487087] binder: release 27292:27294 transaction 2587 out, still active
[  579.499356] binder: unexpected work type, 4, not freed
[  579.508112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x800000000000008, 0x102020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x3, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000180)={0x585, 0x8, 0x7fffffff, 0x100})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  579.555431] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  579.562722] binder: undelivered TRANSACTION_COMPLETE
[  579.574868] binder: release 27292:27294 transaction 2587 in, still active
[  579.586257] gfs2: fsid=dh: Now mounting FS...
[  579.596414] binder: send failed reply for transaction 2587, target dead
06:23:26 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291ffe0003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

[  579.644098] gfs2: not a GFS2 filesystem
[  579.662239] gfs2: fsid=dh: can't read superblock
[  579.668332] binder: 27337:27339 unknown command 0
[  579.682578] binder: 27337:27339 ioctl c0306201 20000040 returned -22
[  579.690348] gfs2: fsid=dh: can't read superblock: -22
[  579.718931] binder_alloc: binder_alloc_mmap_handler: 27337 20002000-20003000 already mapped failed -16
[  579.738517] binder: BINDER_SET_CONTEXT_MGR already set
[  579.757205] binder: 27337:27339 ioctl 40046207 0 returned -16
06:23:26 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910012003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:26 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x7e1, @local, 0xaded}}, [0x1, 0x8, 0x5, 0xa4b, 0x0, 0x3, 0x1, 0x1, 0xfd8, 0x6, 0x3, 0x6, 0x8, 0x400]}, &(0x7f0000000140)=0x100)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f0000000200)=0x8)
listen(r2, 0x1e2)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  579.768278] binder_alloc: 27337: binder_alloc_buf, no vma
[  579.777522] binder: 27337:27346 unknown command 0
[  579.783648] binder: 27337:27346 ioctl c0306201 20000040 returned -22
[  579.791437] binder: release 27337:27339 transaction 2594 out, still active
[  579.804583] binder: unexpected work type, 4, not freed
06:23:26 executing program 2:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f8be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
faccessat(r1, &(0x7f0000000280)='./file0\x00', 0x4, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0))
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000007940)={@local, @remote}, &(0x7f0000007980)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x208e7ccd, 0x8, 'syz0\x00', 0x7}, 0x5, 0xb, 0x1ff, r4, 0x6, 0x10001, 'syz1\x00', &(0x7f0000000300)=['-posix_acl_access\x00', 'cgroup,&selinux$*$\x00', '/dev/rtc0\x00', '/dev/rtc0\x00', 'keyring\x00', 'syz'], 0x44, [], [0x9, 0x1, 0x200, 0xfffffffffffff543]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xe3)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000400)=0xe8)

[  579.845228] binder: undelivered TRANSACTION_COMPLETE
[  579.859476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  579.875870] binder: send failed reply for transaction 2594, target dead
06:23:27 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:27 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:23:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000380)="024ad3db407c44095017b5334e705f14db41ab8fb90a01d930dc21743b378744038615f3662109189ccd7253531dd1774cf92fa084b0e68774e846d153e23bd71195a0dede415ff9505ca39867eaa272731e498df4b170c521213bd2985274835422e2431851ad33aa2243be45b168501852fb3768b49bb3b4fd1c41c9b04dc58ce602a9b54de2b50d5f861ca616d9cc5a66d800547834e2dbf54ab988a140d9bba3d256fd40b82b756968acbd88f16bb47e1dab5190b972bd22f3f6a17ce78d19d1b3302242ceddfa7b32e1ccac214e6fdef6263b9d1ffa251f4158e24a40d455894e10a1")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:27 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000e003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:27 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0)
sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@del={0xf0, 0x11, 0x20, 0x70bd2b, 0x25dfdbfc, {{'rfc7539(lrw-cast6-avx,rmd256)\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4094)
r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000040))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
clock_getres(0x6, &(0x7f0000000080))
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)

[  580.377351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  580.386202] binder: 27365:27370 ioctl 80487436 20000380 returned -22
[  580.396598] binder_alloc: 27365: binder_alloc_buf, no vma
[  580.404354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  580.411730] binder_alloc: binder_alloc_mmap_handler: 27365 20001000-20004000 already mapped failed -16
06:23:27 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

[  580.435355] binder: BINDER_SET_CONTEXT_MGR already set
06:23:27 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291fc09003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  580.465104] binder: 27365:27370 ioctl 40046207 0 returned -16
06:23:27 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x7fffffff)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

[  580.528286] binder: 27365:27372 ioctl 80487436 20000380 returned -22
[  580.577841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  580.597251] binder_alloc: 27365: binder_alloc_buf, no vma
[  580.636529] binder: 27365:27389 got transaction to invalid handle
06:23:27 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  580.679069] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  580.689970] binder: unexpected work type, 4, not freed
[  580.695756] binder: undelivered TRANSACTION_COMPLETE
06:23:27 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000c003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  580.719802] binder: send failed reply for transaction 2599, target dead
[  580.743163] gfs2: fsid=dh: Now mounting FS...
06:23:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6095, 0x2000)
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000003c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000100), &(0x7f0000000180)=[0x0, 0x38, 0x68, 0x78, 0x0, 0x60, 0x18, 0x78, 0x38, 0x0]}, 0x66}}, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000000540)="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"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300003fc80c0ef2ae960084be9b6dec8c8066e7384fa2b17d93d6714326217942817f40a0d0aedd5e6f781a8bfcc087ea7502"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  580.831761] gfs2: not a GFS2 filesystem
[  580.866020] gfs2: fsid=dh: can't read superblock
[  580.937018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  580.941160] gfs2: fsid=dh: can't read superblock: -22
[  580.974182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  581.011142] binder: 27404:27407 got transaction with unaligned buffers size, 102
[  581.074816] binder: 27404:27408 got transaction to invalid handle
06:23:28 executing program 2:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f8be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
faccessat(r1, &(0x7f0000000280)='./file0\x00', 0x4, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0))
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000007940)={@local, @remote}, &(0x7f0000007980)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x208e7ccd, 0x8, 'syz0\x00', 0x7}, 0x5, 0xb, 0x1ff, r4, 0x6, 0x10001, 'syz1\x00', &(0x7f0000000300)=['-posix_acl_access\x00', 'cgroup,&selinux$*$\x00', '/dev/rtc0\x00', '/dev/rtc0\x00', 'keyring\x00', 'syz'], 0x44, [], [0x9, 0x1, 0x200, 0xfffffffffffff543]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xe3)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000400)=0xe8)

06:23:28 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:28 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x100)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={<r3=>0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r6})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000100)={0x0, r5, 0x527})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:28 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:23:28 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910010003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:28 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

[  581.493277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:28 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910048003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:28 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000080)=0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1)

06:23:28 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

[  581.805158] binder_alloc: binder_alloc_mmap_handler: 27404 20001000-20004000 already mapped failed -16
[  581.813939] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  581.821730] gfs2: fsid=dh: Now mounting FS...
[  581.830514] gfs2: not a GFS2 filesystem
[  581.834870] gfs2: fsid=dh: can't read superblock
[  581.840323] gfs2: fsid=dh: can't read superblock: -22
[  581.887314] binder: BINDER_SET_CONTEXT_MGR already set
[  581.936264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  581.963591] binder_release_work: 11 callbacks suppressed
[  581.963598] binder: undelivered TRANSACTION_ERROR: 29201
[  581.976315] binder_alloc: 27404: binder_alloc_buf, no vma
06:23:29 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000d003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:29 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  582.020856] binder: 27404:27408 ioctl 40046207 0 returned -16
[  582.046661] binder_transaction: 11 callbacks suppressed
[  582.046679] binder: 27404:27436 transaction failed 29189/-3, size 0-80 line 2973
06:23:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:29 executing program 2:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f8be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
faccessat(r1, &(0x7f0000000280)='./file0\x00', 0x4, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0))
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000007940)={@local, @remote}, &(0x7f0000007980)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x208e7ccd, 0x8, 'syz0\x00', 0x7}, 0x5, 0xb, 0x1ff, r4, 0x6, 0x10001, 'syz1\x00', &(0x7f0000000300)=['-posix_acl_access\x00', 'cgroup,&selinux$*$\x00', '/dev/rtc0\x00', '/dev/rtc0\x00', 'keyring\x00', 'syz'], 0x44, [], [0x9, 0x1, 0x200, 0xfffffffffffff543]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xe3)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000400)=0xe8)

[  582.213008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  582.364832] binder: 27456:27458 ioctl c0306201 200000c0 returned -14
[  582.397743] binder: 27456:27458 ioctl c0306201 20000140 returned -14
[  582.405545] binder: 27456:27458 ioctl c0306201 20000040 returned -14
[  582.494697] binder: BINDER_SET_CONTEXT_MGR already set
06:23:29 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

06:23:29 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)

06:23:29 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000c003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  582.541865] binder: 27456:27461 ioctl c0306201 200000c0 returned -14
[  582.586389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  582.603838] binder: 27456:27458 ioctl 40046207 0 returned -16
06:23:29 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='bdev^selinux\x00', 0x7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x10000, 0x5, 0x20000000, 0x0, 0x4, 0x1000, 0x8, 0x80000001, 0x7ff, 0x1f, 0x9, 0x800, 0x8, 0xffffffffffffff4e, 0x8, 0x6, 0x101, 0xfff, 0x2, 0xe7, 0x100000000, 0x4bac, 0x7, 0x5, 0x75, 0xffff, 0x2, 0x690, 0x2, 0x100000001, 0x7, 0x244, 0x7, 0x5, 0x10000, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x800, 0x8, 0x0, 0x7, 0xfffffffffffffff9, 0x40, 0x3}, r2, 0xa, r1, 0xe)

06:23:29 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:23:29 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000e003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="00000002000000543d7deb"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000088ff7ebf37c613958392cdf29e5034caffb3ffba2bdb001ad61f607334aba37cfbdcf413db186fe28e637cc8ee6b5f64a0f85f86fc4a"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4001, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x2f8)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000180)=""/28)

06:23:29 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

[  582.998531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  583.049297] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  583.066400] binder: 27484:27486 got transaction to context manager from process owning it
06:23:30 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00')
write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="737461636b20e2646576217666766d6e6574306e6f6465767b74727573160eaba7ba48a0f87ebf3d29021321c34f0517e65c5e893d2653a04c49eb81381bf31af52700000000000000000000000000000000"], 0x1f)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  583.120774] gfs2: fsid=dh: Now mounting FS...
[  583.186527] binder: 27484:27486 transaction failed 29201/-22, size 24-8 line 2825
[  583.194553] gfs2: not a GFS2 filesystem
[  583.199454] gfs2: fsid=dh: can't read superblock
[  583.207999] gfs2: fsid=dh: can't read superblock: -22
06:23:30 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910003003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  583.276229] binder: 27484:27493 got transaction to invalid handle
06:23:30 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:30 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x100)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={<r3=>0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r6})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000100)={0x0, r5, 0x527})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  583.377483] binder: 27484:27493 transaction failed 29201/-22, size 0-0 line 2834
[  583.415837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  583.451644] binder_alloc: binder_alloc_mmap_handler: 27484 20001000-20004000 already mapped failed -16
[  583.506681] binder: BINDER_SET_CONTEXT_MGR already set
06:23:30 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910012003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  583.549224] binder: 27484:27493 ioctl 40046207 0 returned -16
[  583.602627] binder: 27484:27490 got transaction to invalid handle
06:23:30 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)

06:23:30 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

06:23:30 executing program 2:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f8be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
faccessat(r1, &(0x7f0000000280)='./file0\x00', 0x4, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0))
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000007940)={@local, @remote}, &(0x7f0000007980)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x208e7ccd, 0x8, 'syz0\x00', 0x7}, 0x5, 0xb, 0x1ff, r4, 0x6, 0x10001, 'syz1\x00', &(0x7f0000000300)=['-posix_acl_access\x00', 'cgroup,&selinux$*$\x00', '/dev/rtc0\x00', '/dev/rtc0\x00', 'keyring\x00', 'syz'], 0x44, [], [0x9, 0x1, 0x200, 0xfffffffffffff543]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xe3)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000400)=0xe8)

06:23:30 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0x7fff, 0x1, 0x200, 0x401}, 0x10)
r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', r4})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x8, 0xde, 0x1, 0x3, 0x5, 0x7, 0x9, 0x24c, 0x7d42, 0x8, 0x0, 0x20, 0x1, 0x7, 0x1, 0x2}})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  583.651348] binder_alloc: 27484: binder_alloc_buf, no vma
[  583.672063] binder: undelivered TRANSACTION_ERROR: 29201
[  583.678730] binder: 27484:27490 transaction failed 29201/-22, size 0-0 line 2834
[  583.687408] binder: undelivered TRANSACTION_ERROR: 29201
[  583.694760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  583.721823] binder: 27484:27505 transaction failed 29189/-3, size 24-8 line 2973
[  583.760118] binder: undelivered TRANSACTION_ERROR: 29201
06:23:30 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

[  583.775690] binder: undelivered TRANSACTION_ERROR: 29189
06:23:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={<r2=>0x0})
getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x4, 0x2}, @free_buffer={0x40086303, r2}], 0x6e, 0x0, &(0x7f0000000280)="59b88314859202137431a5f789f5b2232f7ff3922f4528b631f4c328219fb5a3580538449629fbaf64f967ec2e275d48c1ea6252610b17aefe8ac77bf0f9d65f2d543b452911f32e539b78bb008383e6a988124e14d1140f6e36b5a4a14eb073f2fef9b8d4778fa5de9a758675ef"})
pipe2$9p(&(0x7f0000000540), 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:30 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910002003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  583.936613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:30 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0xc080, 0x8ef280946571a701)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="042c3e5f36421be687a172e1c8d0058ba8142f82ea", @ANYRES32=r0, @ANYBLOB="00000000010000800000000000000000000000000000000000000000"])

06:23:30 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

[  583.981732] binder: 27536:27537 IncRefs 0 refcount change on invalid ref 2 ret -22
[  584.051953] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  584.065974] binder: 27536:27537 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4
[  584.098618] binder_alloc: 27536: binder_alloc_buf, no vma
[  584.105886] gfs2: fsid=dh: Now mounting FS...
06:23:31 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910004003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  584.139491] gfs2: not a GFS2 filesystem
[  584.155804] gfs2: fsid=dh: can't read superblock
[  584.167235] binder: 27536:27543 transaction failed 29189/-3, size 24-8 line 2973
[  584.181594] gfs2: fsid=dh: can't read superblock: -22
06:23:31 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

[  584.256720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  584.264912] binder: 27536:27537 BC_FREE_BUFFER u0000000000000000 no match
06:23:31 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
io_setup(0x8, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x300, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001100)='/dev/mixer\x00', 0x400, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0xa4000, 0x0)
r6 = eventfd(0xfeda)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001480)='/dev/ppp\x00', 0x10000, 0x0)
io_submit(r2, 0x5, &(0x7f0000001500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xf551, r0, &(0x7f0000000040), 0x0, 0xb14, 0x0, 0x2, r3}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f0000000100)="bc219c75b336eb887be266ab11d4af6e8ccb6bbc86ae9039a99a8f1e4e24c2063f4a7d0fdb489fd903bf624aae9f4814112a2ddc1de3c0bb02977692193f32899655b3129185aa98215a51b5515b3bfddc177c727f72894d1db86a95dc961fc56087df72144ae83aa412a8d70d05120d8a826830b9ebec8408c14382f2c5f034ef402f86c150afca8b8af7245bd46ef5a380c195a225f006703f7ab8f3db58a6218cac273a3c9b8b010d6309874e9f5cb7960675e252006182d6874a61d5effda67c3d7340e064ff7d37f2eb1da3d575e12a713ba81ff599b593233af432d2490ca1aaf992ecff33a029faa113bc280df7e6f5a46467fd268efb0b21ab1afe3a231890bcf0c6a3f2c787d8037ac57635fbd09cefc202eacf75e1aec676f0842f0e0dc5afa057fe711db390661af7cbbde3e729fc91dad6b51b2a339c029473d5a67b8a1c89b1bf595fdc82659472c7c3bad470df2c44df489309bbbf0fcd20329250113300edbe373a9b1422257044feb27df6b241fcfe4ffc320ccd1685de522558f4a4362d4c8b7cdb9c59b2723a8298fcbacfd4fce8cbf5ed3a06176d304d5622e63ff6b52537feb4c2a9618611e79e524c2fbc12e6ad50b8deaf7d0bbefc968379a2008b662ff46df4af5bbf7e016e7993a3397b282f46935a678d27b3fbdee53d64591d9dd0497bab457f8e2bebd0624203f9f71e03cb22b6d9a53ffb88433902db2c05dadeef5e9314d09734f7d3e4dddf9c0d7477e816d2bbcbac6097a0cd4982e1b2b940bc6115d410221536b1159b3976389bb66ae92b89c9d78eacc0c2fffc7007febb64a680d32307abeb82e82256d0f22923d52bc17c96c03c83e5574a231617cd5b2afab5cd94be3cacfefe0d97e1912668d1c9ba6246e87783492f8dd1fae0d5010f5e7cbb6c5e99f07c52341287f7e94f23f26eb698e5fbd1d74c0e4b557f940a2647a38b61526a0d64d29466b17f0342ef68499e40814b726f7ec4617aa54d8bbff890ecb58f19487effb4328eec106ef037efe6744cf46e419eff55f4e845b3b93db8b53cfc1c567ba07adf8a4a240e10c4349f21d7344d787d8a7d3f95831f102f2c3e28459cb21e49afe42d2c675db577a9f4e9c095db7311571dbf010df2aeda02ef5ea02241c11209f1a2d64b6fd3e09b0906e26c21d85c0e2e25756b3bdf648a3e46f2e48592b66764646d2e8cb770c82cee2241cf0313a4131c73e5f0abad2e3b420cf6385481460c2600e7433cd9c02bbd19ee4ab9c3aeaeefe002441c612fd45912a65b6b722c1eabd195f02b42fb7e50e034406c066fbec34750482ca558022960a9b6a6472c3b9034c72713e106b3598185fd5e7506955370b63dde038b6f0f847ffeef6530055d78f449bdccc5a67194e13ea173a3eb60da788c498d90a259aecf8c6bfc6dd451ddb43ba1f343cf226d4a737861df7194b08122c2d36e952632bed39fc4ad478f2642d3d8efdea94ae741333697ecb06f945c5bcaa92604b468c2035506b59099e830538509429016129c0027ff77620f3fa795ea7f261a9832ce3c841a5f08254379375e963e307e427a28bf949293693e4c1deb4a8498c3221915b3e1f2412191ebcd077d69fae7a3a496059d0428bfe041a3a452add04ed34f9f6055fc24e68a966c2d47ebf9ace7be671d6b6f9d26aa8dfa96ab161e86fbcbb7298e5c40b0ec6a2674ed22efc266e48e0df06b42525d8ff221c8ae9b71952e83fc6b0de8267ad988069866d1588607c82e7c362be5327903a83a8832050b845e91d6852ae2492a9b7eb84329875580a6d97947c254e5e7da82457fa5218d7aae450cc791f197f2718b0c72ae1672a52d51632627ecddb102cc68db94386330c032eaca7a9d7f024c93ba909a51a8d603a1555ba979df9ce9913dbf7f8c336818a1a2de02ad334eb85a1e1f47f2cd7f46ba0e979e9da86389678ad467751af498726f79bfc0d19b0194943f6d5958fd8c260affb2422e8399a8096dc89a09e566a80e8fa6ff0b4f1584405cb4b3baf428fb6f83229a52c675d1b88632ec906d501d84cfd30a5436446a5ed70441c7cacfcacda179b396dd15d4a22865fbb89e380f54fd914339a1cccce1f46cb460e0e847aa19fcc828bef5e9366dbfe3fee2733b5a9be1fc7b22a546a4b9d812394cf0640194497132925641d7ba6c8a300c27ee05b5d7f71b0dfbbb89f8d927a68bd9244ba11b01a8d5d175167b813396709593826983a0e0266fce920f4d281aa1d134d5d52a55150c4cda245cea49203541ff0f29ac872d1a3dddd50ce1edd6a6e07a811373b22e55118bc9b4457ab1a01f0b685527c5e07b3b7946331e4eb74d2a305e1fe9541c2c66aabb99f4d61b5c5393db9b989a728208a2eb9984da370a0d651f719ee6a7a03a94ab5bf4e681f778425b77a865138a240b10e8047467b92de5af1839125772218eeef79b275adc7db0bd0fc20a9e63e4933d9c1009a04fa4d6147cbc7184dd461e79b2433f04ff403d44cf00875f95eb3dd5301aa7a165ffdeaaf8c18c8975b9505cc23fd4def0757fc1414535dc58064464c67dd36ebf19185a480735870e2fc369256a6f552a88443233c795da30dc6adbe8d3083a5f9e11c9ad4fb61ae4cfa957c41459ad7833a7baffb87380b08b051e4de440c9c70fbb47d27d926e089d825c7a2e6f6785eced4212040ba49fe11dfe77cbb720dff283328f420476e247a455da6b827f788015fad9bc695769c0203b55ea9cac1ffda8ee851477365c1345616b26b7434facaf43211ed1345ffb58b4f24ec166c8b287daf91550c89df1aee0775e1f69002b9c5e6fd80aad5807b6ce5c50f425e70388af6f52f18d380cee01063719ee06f8b365ba7bc7c19a62867a2e65fd332cfbafc06669534ed566a3c4081dab15f28284ad7e0216c2cedf18286103069eadbb43213af5db12f12da86cc9c23671a6ce6e15eb8b41d754da11b8d6d9ca4f3d72335e2efcf053d01a12d79bccd2ebae9af9adabaacad9bf2a73622fd74da69edc343b0371ea05d6f262bf8bd8144cf1b614701fc999a06ac3277b36a1d5fb40aa388e5d13ade07514f79980ab6127b57274ecb530232be5b1dab3a203852450ad55eb242ed175a343e47d259e0bd2ed1e0cd19b0c42927439e8524358fd5e23ca2dc2b7d34d2745ebc40df96dff6186d41adc02bef5cc041637e1ffc6166d94308abc48c3f5371403c24fc2326b50787adf23480ac57496dbf88885e16e24fb6b182503a02268fb2f0de26f15e7f5ac6f562768cb7cdd72e1768cc97d846442d8329de6905a88e45dce0fc4895ee31c5e7853e444943ff7856a447dd26286157de2ebd25d101e1d7254c3fb15deca907ab6025fb65b853f0ef043f1436e37eb8c45f16f37344092108736a203b53e1b1e9e7581394d430c1b56283d5e46d36609105c775551a7cf2d2d4ce5a5f7ff8385dc6c56f3eeddbcdff0e06d89e6c0c6c73c223b6c4a07fb8f099ec7fcb0fe57f86755a397ae8200a86132616568d2e1a966de4f2d7b4a2ff6966380b3c0824a100c3fc7c278ed0863e93cd8b18ddf540906aa1f0635d814a86c114d81458eeeaa2a6378b11a5ef7353e17395fde8a4e20686538bf402188db3d63ae3d24bed0aaaf3a44d5d5826354e30030307bb0a73349503cb99419ce21c1eeeae9e68490df36a175f13eb2909b2b2a5fb8ae45e7a40ee7a5d6d2cc4be586717c97c1687ec9e29d679a1eaa80a3ed8229f9490ac6403a1c6cb30430ece3d2f8609d5860ba6f39c3f486fa0220aa39e83aa9a263f95f3fd86b5c4b3f70b4881fea73cfeda2d41efce8b82ca582e0e60426aff43571b7e40b684747bef7cfb78bac3f74945bc074e7cc06450a326ff2387515a24fdb8b346ac68e9d85746368ec0a76b15989f61985a8e9cee50e5772cc0555af002d829f695374a3ee0200fc6ae73ad94252c9f6bcda42321b8aee5b0f15d3a5963b43954f924a26bea2dbb263b64432cca95bf204727b52b45b702e81bbac9b4788fd6d660e91fd1b6e2761dc6d30920284c2104b0f328698300602c0b500567bb41a9b7f656b2852b552eaee5dcb0926bfc6c856f16a4a68a8436e0b52ebbbbcd396eee63d89021ad98d855c9710eef5791c67a3e8e8907712636f9b75e4019b39ec0c20534e0fdf5feebafd72988dbec172b2241dff9b43c4dbf905f24df9e56a85bff159f8d74918d6a3e119047a85af28b944c1c4cc86cde713a9ce1a765f20a0b2e41f0046d71bb9a5943c2b54be6d7901b5a314d2a9a0cb8ba54b50491763995291daf9919d133ca35771fc55338609eef55d41525fcef2e16af3cdfb9f098eeb322825492dab938d230bc6d1fd8ea39939e741cd2767040d13c91f1714760f394232eec582abf1d4af347b2fe658953d3529867e067e58633a8efb0fe60b8a6c2f52450b9b409c185042fa8f4525df7e143080ca1f87f36a234e3c565747282c0116328bd244e5a71d4876a98b6782d132bc130c666fbd8eb68d13c09629c36da45d7c025f98d35159845c68917a6f8e821191019f7a8b1919b620de7463d05a58faf0cce6284b4d759cb3b578ae4d22268b78a358ed0658ccda630f40c5ea4526f7c6f5b9699fe07346277b31cf5a63a76a1903668254a2e03ede8f4e1dad526d11ef53435e28eb76191b3eecec82953b4a069e137dfa40ca076631c7ea6b14573da400492f857d8da9686156607e76b7386d307b9c9dcc0339ae15ac88c20d5fc785c7428ad0f118897a78a00a8f95e22b00d3d4d91dbed904e47c5c68f7ff90aacc7581077bc24b74673e62af02464771846196899cab2d23e890cb88bb2e105e573e6dfa395720688009ffb2392c9e7c68e7e643726662c9e4be3289d5e9dfc3b92e7a8ed19afbe61f1545583a0f7dd7e31533669b94065adbd81dab16eff4ed39e4b6f1647976e5bf479d3b2c264bc24558742a97579f605770890e9c3360b08e937de57363f0ddc958885d2d8e2d0f883d071cd93b565848c2b41ddc7ab7f679f862553c521479cb9d51c0d0d26f6cac32181f582eddc41200a971ac73ef332250b7e921db5ace81ebe1efa4afd61b092acd31422f4ca820c781f6136295b87e454b354232092e8d6c83268a77b174992f680d16763c68d392dc3a5d2170dbbc9de7107d752fd65a17036557ed5cd2fd2b4373e8e5b6186f0748f19a346f6dbbb20c2a17bfb7f4f5e51e6e21f416522b7ea671084d203f80947f0fec7c5e8c42eb93d818219bddf8ca17c7c60b126542bfacd2f20b28f7f60521cfc46961c3e37f55d07eebd701e920fefd292a1f74b8596baa5c88c7b33b168fc6672e3d7e4e189d5ad1b4a0160ae3d80bdfcfef73bdf5023a7429f0039e5f824ccbd1ebaa11e7d6db6e33bfb3c0d93d24ac5e8c49f71873ed6e560834573f01211a28cd5f39935b646cceca91798aaff694d3ff68d67a3dbd42eeb6bddec2b1cc35caa69c11c3946d11b67573235196db5abaccafbbe5c8a0d72270e8bedb8a3178f889a1c7dd8d91f88d8f57a7c07f5ed0986c777acf1be151477d960722016e7aae2a00d3475bc8f1758e1e79c667c667526cdc9d374eaaf61af96509a26de17b81bb9b196e09766320d79ab8209f0ea5cea75e6016c4b196f126805a54330fc657b6dedbc3c627943d7f8f3558b523160cdbe6247909f27cac0fbf91b4a9b92b3a8976b32554a5017cf148bc3bc9c9f205aaa666355b10c1347d84d53d6daef5bf93a9a13783d3d46f0f0f19e3b8bc5b48a9cfc0454d716f758d9b8bde855313", 0x1000, 0x3a63c9c0, 0x0, 0x1, r4}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000001180)="16661fde5b62d92eda18df6ea8680ebd36d86e735612b045a81e3a05f2ec9b3c850f9c5b03e86535d4e0fce6bfd551a25850322bd1c0cc8ec732b93dbdac16ff81e911a61e50ca342ba0789df83e1daee5fbbd7a29fd0beb22e96c91dcff4986d28dc8f8592df555ca817b20eca089ab2d945bfc3015aa63fc47274126c6c781", 0x80, 0x3, 0x0, 0x0, r5}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000001280)="04a4b023cbad428cb5f559975cf322bc71dd3b4bb5455192ed91f90d73325d12754fed0434b90724d5684e0a75defd6705143ab37c26bd0b8c4f1615cc5d477677bc89dbaf7e3315041f985966602f9977de0bbbe25c86e5392a56088fa75b233a05d90e791b19684183fe8ed4d910366adf98b3eab0470deb16b0f34da1681bcf9773fc1bd2e25ba85e1b0ca95bfa21f37c8730b683d1489ec9304468b48966", 0xa0, 0x6, 0x0, 0x3, r6}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x2170, r0, &(0x7f0000001380)="07625cbf40f1e2cebd33581273ad7cf8306bacf32b959c8c253318297989a35ccfa399cb35392723fdfa65e628249b69cfb5fe43b1a2c46216cee7da9a3aab99aaa612919e4d69dda523ffcffa7dcbbd75927c4af083ecb0f20355aaa46559dd6cca82fccb8b70e5ff992f769fb25e8c9c5dca5dca8902a32f05580891786d06082c664307e908aac82a733e5ae3517855b3a7d4aee8072c4b6f8666cac424e0f97773880338aec20a7906d26343e9204f4e98550e335917cd30642263c32e04a7ad1cc710bc1ea8885768f3738f97c29de8f7b6791d6fe3004d87230075e4ab68cdc75470bb83", 0xe7, 0xffff, 0x0, 0x1, r7}])
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  584.345871] binder: 27536:27550 got transaction to invalid handle
[  584.401631] binder: 27536:27550 transaction failed 29201/-22, size 0-0 line 2834
06:23:31 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)

06:23:31 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

[  584.767171] binder: BINDER_SET_CONTEXT_MGR already set
[  584.772552] binder: 27536:27543 ioctl 40046207 0 returned -16
[  584.805128] binder: 27536:27550 IncRefs 0 refcount change on invalid ref 2 ret -22
[  584.862041] binder_alloc: 27536: binder_alloc_buf, no vma
06:23:31 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910008003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  584.918200] binder: 27536:27546 got transaction to invalid handle
06:23:31 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:23:31 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000340)={0x3, 0x2, &(0x7f0000000280)="c51972aab84f31f04976bda021c1d0317c9fc25590ff5d19ff7af4be447dfa9827d69a2fe67ca7410b5d842b59847bb160aaee358902157bcc3fe566e3463080ab39a6c03089cb4543d223c721b0ce53a3280fa1a9a4d913ff02a90e575617ca5b981eb142dc40708a24c5e223853c90206463d4190fcbc158b7360a79e825cf1e0e31c35a158ac110858e9a70f1b54b76524206f547b63b9471f4e1d3e398f35bb0ca4b58c864d7961404325946e7815c8f9463106ffcb0ae73", {0x3, 0x6, 0xf7357279, 0x9, 0x8, 0x7f, 0xb, 0x4}})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x200000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x1}}, 0x18)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x22000, 0x0)
ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000040)={0x401})

[  584.976791] binder: undelivered TRANSACTION_ERROR: 29189
[  585.001837] binder: 27536:27550 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4
[  585.005607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  585.016075] binder: undelivered TRANSACTION_ERROR: 29201
[  585.077101] binder: 27536:27546 transaction failed 29201/-22, size 0-0 line 2834
[  585.123630] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  585.139916] binder: 27536:27568 transaction failed 29189/-3, size 24-8 line 2973
[  585.155518] gfs2: fsid=dh: Now mounting FS...
[  585.164133] binder: 27536:27550 BC_FREE_BUFFER u0000000000000000 no match
[  585.175470] binder: undelivered TRANSACTION_ERROR: 29189
[  585.182557] binder: undelivered TRANSACTION_ERROR: 29201
[  585.188248] gfs2: not a GFS2 filesystem
[  585.196113] gfs2: fsid=dh: can't read superblock
[  585.215431] gfs2: fsid=dh: can't read superblock: -22
06:23:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf7, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0))
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000001c0)={0x7, 0x14, [0x1, 0x7f7, 0x5, 0xff, 0x0]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:32 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)

06:23:32 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:23:32 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100e0ff3900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:32 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = getpgid(0x0)
read(r0, &(0x7f00000000c0)=""/188, 0xbc)
move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  585.306802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  585.374869] binder: 27596:27598 unknown command 0
[  585.392853] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  585.414816] binder: 27596:27598 ioctl c0306201 20000100 returned -22
[  585.444497] binder: 27596:27600 ioctl 5401 200000c0 returned -22
[  585.456474] CPU: 0 PID: 27592 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  585.464070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  585.473441] Call Trace:
[  585.476058]  dump_stack+0x244/0x39d
[  585.479747]  ? dump_stack_print_info.cold.1+0x20/0x20
[  585.486492]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  585.491693]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  585.496127]  sysfs_create_dir_ns+0x2a1/0x340
[  585.500561]  ? sysfs_create_mount_point+0xa0/0xa0
[  585.505420]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  585.510203]  kobject_add_internal.cold.11+0x116/0x6af
[  585.515416]  ? kobj_ns_type_registered+0x60/0x60
[  585.520188]  ? kfree_const+0x59/0x70
[  585.523918]  ? rcu_read_lock_sched_held+0x14f/0x180
[  585.528955]  ? kfree+0x1f8/0x230
[  585.532336]  ? kfree_const+0x5e/0x70
[  585.536065]  kobject_init_and_add+0xf4/0x140
[  585.540519]  ? kobject_add_internal+0x4d0/0x4d0
[  585.545202]  ? vsnprintf+0x20d/0x1b60
[  585.549177]  gfs2_sys_fs_add+0x1ff/0x4f0
[  585.553262]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  585.558810]  ? recover_store+0x1a0/0x1a0
[  585.562893]  ? snprintf+0xae/0xe0
[  585.566367]  ? vscnprintf+0x70/0x80
[  585.570014]  ? memcpy+0x45/0x50
[  585.573379]  fill_super+0x89c/0x1a10
[  585.577138]  ? gfs2_online_uevent+0x2b0/0x2b0
[  585.581650]  ? retint_kernel+0x2d/0x2d
[  585.585600]  ? set_blocksize+0x14c/0x340
[  585.589672]  ? set_blocksize+0x15a/0x340
[  585.593750]  ? __sanitizer_cov_trace_pc+0x26/0x50
[  585.598611]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  585.603638]  ? set_blocksize+0x2c1/0x340
[  585.607723]  gfs2_mount+0x5e6/0x712
[  585.611373]  ? fill_super+0x1a10/0x1a10
[  585.615436]  ? alloc_pages_current+0x17b/0x350
[  585.620037]  mount_fs+0xae/0x31d
[  585.623425]  vfs_kern_mount.part.35+0xdc/0x4f0
[  585.628023]  ? may_umount+0xb0/0xb0
[  585.628039]  ? _raw_read_unlock+0x2c/0x50
[  585.628055]  ? __get_fs_type+0x97/0xc0
[  585.628079]  do_mount+0x581/0x31f0
[  585.628103]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  585.635884]  ? trace_hardirqs_on+0x310/0x310
[  585.635905]  ? copy_mount_string+0x40/0x40
[  585.635920]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  585.635951]  ? retint_kernel+0x2d/0x2d
[  585.635980]  ? __sanitizer_cov_trace_const_cmp2+0x20/0x20
[  585.635996]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  585.636011]  ? copy_mount_options+0x315/0x430
[  585.636032]  ksys_mount+0x12d/0x140
[  585.636050]  __x64_sys_mount+0xbe/0x150
[  585.643483]  ? do_syscall_64+0x1b4/0x820
06:23:32 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

06:23:32 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100e0003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  585.643499]  do_syscall_64+0x1b9/0x820
[  585.643515]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  585.643533]  ? syscall_return_slowpath+0x5e0/0x5e0
[  585.643548]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  585.643568]  ? trace_hardirqs_on_caller+0x310/0x310
[  585.643587]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  585.643605]  ? prepare_exit_to_usermode+0x291/0x3b0
[  585.654104]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  585.663086]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  585.663099] RIP: 0033:0x45a0ea
[  585.663115] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  585.663122] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  585.663138] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  585.672564] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  585.672573] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  585.672581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  585.672591] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  585.685750] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  585.698454] gfs2: fsid=dh: error -17 adding sysfs files
[  585.731542] binder: 27596:27600 got transaction to invalid handle
[  585.755982] binder: 27596:27600 transaction failed 29201/-22, size 0-0 line 2834
06:23:32 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:32 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000001080)='./file0\x00', 0x60000, 0x90)
getsockname$packet(r2, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001100)=0x14)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x50000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'yam0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00799c5bd87f04040269088e07ddffffff7fed010000060000000800000009000000080000000e09000000800000000000000000"]})
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r4)

06:23:32 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

06:23:32 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = getpgid(0x0)
read(r0, &(0x7f00000000c0)=""/188, 0xbc)
move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  585.957219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:32 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910006003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  586.131317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.152647] binder_alloc: binder_alloc_mmap_handler: 27596 20001000-20004000 already mapped failed -16
[  586.203341] binder: BINDER_SET_CONTEXT_MGR already set
[  586.235081] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  586.242931] binder: 27596:27600 ioctl 40046207 0 returned -16
[  586.250635] binder: 27596:27632 unknown command 0
[  586.256287] gfs2: fsid=dh: Now mounting FS...
[  586.265775] binder: 27596:27632 ioctl c0306201 20000100 returned -22
[  586.271430] gfs2: not a GFS2 filesystem
[  586.272822] binder: 27596:27600 ioctl 5401 200000c0 returned -22
[  586.280495] gfs2: fsid=dh: can't read superblock
[  586.283678] binder: 27596:27629 got transaction to invalid handle
[  586.288478] gfs2: fsid=dh: can't read superblock: -22
[  586.294590] binder: undelivered TRANSACTION_ERROR: 29201
06:23:33 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:23:33 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x10000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0xc0, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0xffff}, @in={0x2, 0x4e24, @rand_addr=0x17d6094e}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x800, @remote, 0x9}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0xfff}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0x1}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="6c6f3a00000600"})

06:23:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r3 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='system{\x00', 0xfffffffffffffff8)
keyctl$unlink(0x9, r2, r3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:33 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910005003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  586.378808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:33 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000b003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  586.440643] binder_alloc: 27644: binder_alloc_buf, no vma
[  586.457735] binder_alloc: binder_alloc_mmap_handler: 27644 20001000-20004000 already mapped failed -16
[  586.497636] binder: BINDER_SET_CONTEXT_MGR already set
[  586.515166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.527196] binder: 27644:27646 ioctl 40046207 0 returned -16
[  586.556790] binder_alloc: 27644: binder_alloc_buf, no vma
[  586.580102] binder_thread_release: 3 callbacks suppressed
[  586.580114] binder: release 27644:27646 transaction 2624 out, still active
[  586.593267] binder: unexpected work type, 4, not freed
[  586.615522] binder: undelivered TRANSACTION_COMPLETE
[  586.633369] binder: release 27644:27646 transaction 2624 in, still active
[  586.655732] binder: send failed reply for transaction 2624, target dead
06:23:33 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xaead, 0x0)

06:23:33 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291001d003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

06:23:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='a\x00\x00'], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:33 executing program 3:
r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffff00000000)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000011c0)={0x3, r0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)
r3 = fcntl$dupfd(r1, 0x406, r1)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000000))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140))
r5 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{0x7, 0x5}, 0x2}, 0x10)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001200)=ANY=[@ANYBLOB="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"])

[  586.887668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.913528] binder: 27669:27677 ioctl 5601 0 returned -22
06:23:33 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910011003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

[  586.967215] binder: 27669:27685 unknown command 97
06:23:33 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = dup3(r0, r1, 0x80000)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  587.004581] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  587.016138] binder_alloc: 27669: binder_alloc_buf, no vma
[  587.036425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  587.038132] binder: 27669:27685 ioctl c0306201 20000140 returned -22
06:23:34 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  587.075953] gfs2: fsid=dh: Now mounting FS...
[  587.088770] binder_alloc: binder_alloc_mmap_handler: 27669 20001000-20004000 already mapped failed -16
06:23:34 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910007003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  587.118578] gfs2: not a GFS2 filesystem
[  587.129551] binder: BINDER_SET_CONTEXT_MGR already set
[  587.143517] binder: 27669:27677 ioctl 40046207 0 returned -16
[  587.146187] gfs2: fsid=dh: can't read superblock
06:23:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

[  587.184662] gfs2: fsid=dh: can't read superblock: -22
[  587.198886] binder_alloc: 27669: binder_alloc_buf, no vma
[  587.216737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  587.233359] binder: 27669:27703 unknown command 97
[  587.239504] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  587.251758] binder: release 27669:27677 transaction 2630 out, still active
[  587.255647] CPU: 1 PID: 27696 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  587.260514] binder: 27669:27703 ioctl c0306201 20000140 returned -22
[  587.266313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  587.266320] Call Trace:
[  587.266347]  dump_stack+0x244/0x39d
[  587.266366]  ? dump_stack_print_info.cold.1+0x20/0x20
[  587.266385]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  587.266406]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  587.266423]  sysfs_create_dir_ns+0x2a1/0x340
[  587.266446]  ? sysfs_create_mount_point+0xa0/0xa0
[  587.273601] binder: unexpected work type, 4, not freed
[  587.282318]  ? vprintk_func+0x85/0x181
[  587.282338]  kobject_add_internal.cold.11+0x116/0x6af
[  587.282356]  ? kobj_ns_type_registered+0x60/0x60
[  587.282373]  ? kfree_const+0x59/0x70
[  587.282389]  ? rcu_read_lock_sched_held+0x14f/0x180
[  587.282408]  ? kfree+0x1f8/0x230
[  587.285825] binder_transaction: 4 callbacks suppressed
[  587.285840] binder: 27669:27685 transaction failed 29189/-3, size 24-8 line 2973
[  587.288623]  ? kfree_const+0x5e/0x70
[  587.288645]  kobject_init_and_add+0xf4/0x140
[  587.288659]  ? kobject_add_internal+0x4d0/0x4d0
[  587.288677]  ? vsnprintf+0x20d/0x1b60
[  587.288702]  gfs2_sys_fs_add+0x1ff/0x4f0
[  587.288730]  ? recover_store+0x1a0/0x1a0
[  587.288748]  ? snprintf+0xae/0xe0
[  587.288761]  ? vscnprintf+0x70/0x80
[  587.288779]  ? sb_set_blocksize+0x4a/0x110
[  587.296619] binder: undelivered TRANSACTION_COMPLETE
[  587.299098]  ? memcpy+0x45/0x50
[  587.299123]  fill_super+0x89c/0x1a10
[  587.303604] binder_release_work: 3 callbacks suppressed
[  587.303609] binder: undelivered TRANSACTION_ERROR: 29189
[  587.307933]  ? vsnprintf+0x68d/0x1b60
[  587.307952]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  587.307965]  ? vsnprintf+0x20d/0x1b60
[  587.307987]  ? gfs2_online_uevent+0x2b0/0x2b0
[  587.307999]  ? pointer+0x900/0x900
[  587.308017]  ? match_strlcpy+0xcc/0x110
[  587.332445] binder: undelivered TRANSACTION_ERROR: 29189
[  587.335847]  ? gfs2_mount_args+0x972/0xb10
[  587.335868]  ? snprintf+0xae/0xe0
[  587.335881]  ? vsprintf+0x40/0x40
[  587.335902]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  587.335915]  ? set_blocksize+0x2c1/0x340
[  587.335939]  gfs2_mount+0x5e6/0x712
[  587.335959]  ? fill_super+0x1a10/0x1a10
[  587.343207] binder: send failed reply for transaction 2630, target dead
[  587.344371]  ? alloc_pages_current+0x17b/0x350
[  587.344391]  mount_fs+0xae/0x31d
[  587.344412]  vfs_kern_mount.part.35+0xdc/0x4f0
[  587.344430]  ? may_umount+0xb0/0xb0
[  587.344445]  ? _raw_read_unlock+0x2c/0x50
[  587.344460]  ? __get_fs_type+0x97/0xc0
[  587.344481]  do_mount+0x581/0x31f0
[  587.344496]  ? trace_hardirqs_on_caller+0xc0/0x310
[  587.344515]  ? calibrate_delay.cold.0+0x543/0x5f9
[  587.519061]  ? copy_mount_string+0x40/0x40
[  587.523293]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  587.528228]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  587.532999]  ? retint_kernel+0x2d/0x2d
[  587.536977]  ? ksys_mount+0xe2/0x140
[  587.540706]  ? audit_kill_trees+0x460/0x460
[  587.545025]  ksys_mount+0x12d/0x140
[  587.548650]  __x64_sys_mount+0xbe/0x150
[  587.552619]  do_syscall_64+0x1b9/0x820
[  587.556502]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  587.561862]  ? syscall_return_slowpath+0x5e0/0x5e0
[  587.566798]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  587.571635]  ? trace_hardirqs_on_caller+0x310/0x310
[  587.576646]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  587.581667]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  587.587198]  ? prepare_exit_to_usermode+0x291/0x3b0
[  587.592211]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  587.597064]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  587.602246] RIP: 0033:0x45a0ea
[  587.605445] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  587.624350] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  587.632062] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  587.639323] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  587.646586] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  587.655339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  587.662601] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
06:23:34 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:34 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f630aa703d90c40020000000400000000f300000d6300000003000000000000000f630c400000000000000000000000000b6300000e630c40020000000100000000000000"], 0x3b6, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0cf50000"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x6, [0x1, 0x7fffffff, 0x2, 0x5, 0x7ff, 0x5]}, &(0x7f00000001c0)=0x10)

06:23:34 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r2 = getpgid(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, <r3=>r1, 0x0, 0xc, &(0x7f0000000080)='mime_type@*\x00'}, 0x30)
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x7aa7e3e4, 0xc840, 0x800, 0xb3a, 0x0, 0x619d, 0x4, 0x2, 0x2, 0x10001, 0x10000, 0xe9b, 0x80000000, 0x2, 0xfffffffffffffffc, 0x2, 0x32, 0x401, 0x5d, 0x7f14, 0x4, 0x101, 0x5, 0x6, 0xfff, 0x81, 0x8001, 0x8, 0x8000, 0xd083, 0x7fff, 0x8, 0x10000, 0x49f, 0x8000, 0x2, 0x0, 0x100000001, 0x2, @perf_config_ext={0x9e, 0xbd6}, 0x0, 0x2, 0x9, 0x7, 0x1, 0x401, 0x56}, r2, 0xf, r3, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:34 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000a003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

[  587.787902] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  587.802206] gfs2: fsid=dh: error -17 adding sysfs files
[  587.868425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  587.883804] binder: 27717:27721 ioctl c0306201 200000c0 returned -14
[  587.925896] binder: 27717:27721 unknown command 62732
06:23:34 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000140)=""/234)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x6, @loopback, 0x5}, {0xa, 0x4e21, 0x2, @mcast2, 0x100}, 0x4, [0x392, 0x3, 0x4, 0xe26, 0x2, 0x7ff, 0xb4a, 0xfffffffffffffffa]}, 0x5c)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)
timer_create(0x5, &(0x7f0000000040)={0x0, 0x23, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000080)=<r3=>0x0)
timer_getoverrun(r3)
gettid()

06:23:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:23:34 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910014003900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:34 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  587.962211] binder: 27717:27721 ioctl c0306201 20000140 returned -22
[  587.994412] binder: 27717:27732 got transaction to invalid handle
[  588.004599] binder: 27717:27732 transaction failed 29201/-22, size 0-0 line 2834
[  588.051529] binder_alloc: binder_alloc_mmap_handler: 27717 20001000-20004000 already mapped failed -16
[  588.066967] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  588.078741] binder: BINDER_SET_CONTEXT_MGR already set
[  588.084887] gfs2: fsid=dh: Now mounting FS...
[  588.090814] binder: 27717:27721 ioctl 40046207 0 returned -16
[  588.097049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  588.104375] binder: 27717:27732 ioctl c0306201 200000c0 returned -14
[  588.117041] gfs2: not a GFS2 filesystem
[  588.121189] gfs2: fsid=dh: can't read superblock
[  588.127976] binder: 27717:27744 got transaction to invalid handle
[  588.135600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  588.143732] binder: 27717:27743 unknown command 62732
06:23:35 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  588.149887] gfs2: fsid=dh: can't read superblock: -22
[  588.156276] binder: 27717:27743 ioctl c0306201 20000140 returned -22
[  588.184628] binder: undelivered TRANSACTION_ERROR: 29201
[  588.191543] binder: 27717:27744 transaction failed 29201/-22, size 0-0 line 2834
[  588.237870] binder: undelivered TRANSACTION_ERROR: 29201
[  588.262116] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  588.274648] CPU: 1 PID: 27746 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  588.282084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  588.291459] Call Trace:
[  588.294085]  dump_stack+0x244/0x39d
[  588.297757]  ? dump_stack_print_info.cold.1+0x20/0x20
[  588.302981]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  588.308125]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  588.312565]  sysfs_create_dir_ns+0x2a1/0x340
[  588.316998]  ? sysfs_create_mount_point+0xa0/0xa0
[  588.321875]  kobject_add_internal.cold.11+0x116/0x6af
[  588.327087]  ? kobj_ns_type_registered+0x60/0x60
[  588.331993]  ? kfree_const+0x5e/0x70
06:23:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x994a957c31ac28af, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x10, &(0x7f0000000180)={&(0x7f0000000540)=""/251, 0xfb, <r3=>0xffffffffffffffff}}, 0x10)
mknodat(r2, &(0x7f0000000440)='./file0\x00', 0x10, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x10, &(0x7f0000000280)={&(0x7f0000000380)=""/142, 0x8e, r3}}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000ff4ea0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6, @in=@multicast2}, {@in6=@loopback, 0x0, 0x6c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffff7f}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="842a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c640300"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  588.335732]  ? kobject_set_name_vargs+0xe2/0x150
[  588.340523]  kobject_init_and_add+0xf4/0x140
[  588.344953]  ? kobject_add_internal+0x4d0/0x4d0
[  588.349654]  ? vsnprintf+0x20d/0x1b60
[  588.353498]  gfs2_sys_fs_add+0x1ff/0x4f0
[  588.357575]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  588.363133]  ? recover_store+0x1a0/0x1a0
[  588.367219]  ? snprintf+0xae/0xe0
[  588.370693]  ? vscnprintf+0x70/0x80
[  588.374353]  ? memcpy+0x45/0x50
[  588.377656]  fill_super+0x89c/0x1a10
[  588.381380]  ? trace_hardirqs_on_caller+0xc0/0x310
[  588.386332]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  588.391896]  ? calibrate_delay.cold.0+0x5a6/0x5f9
[  588.396933]  ? gfs2_online_uevent+0x2b0/0x2b0
[  588.401437]  ? retint_kernel+0x2d/0x2d
[  588.405333]  ? set_blocksize+0x80/0x340
[  588.409302]  ? set_blocksize+0xd4/0x340
[  588.413279]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  588.418294]  ? set_blocksize+0x2c1/0x340
[  588.422360]  gfs2_mount+0x5e6/0x712
[  588.425988]  ? fill_super+0x1a10/0x1a10
[  588.429988]  mount_fs+0xae/0x31d
[  588.433353]  vfs_kern_mount.part.35+0xdc/0x4f0
[  588.437929]  ? may_umount+0xb0/0xb0
[  588.441546]  ? _raw_read_unlock+0x2c/0x50
[  588.445688]  ? __get_fs_type+0x97/0xc0
[  588.449580]  do_mount+0x581/0x31f0
[  588.453217]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  588.458667]  ? retint_kernel+0x1b/0x2d
[  588.463154]  ? copy_mount_string+0x40/0x40
[  588.467381]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  588.472133]  ? retint_kernel+0x2d/0x2d
[  588.476018]  ? copy_mount_options+0x239/0x430
[  588.480505]  ? copy_mount_options+0x23f/0x430
[  588.484995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  588.490529]  ? copy_mount_options+0x315/0x430
[  588.495022]  ksys_mount+0x12d/0x140
[  588.498645]  __x64_sys_mount+0xbe/0x150
[  588.502628]  ? do_syscall_64+0x1b4/0x820
[  588.506772]  do_syscall_64+0x1b9/0x820
[  588.510662]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  588.516025]  ? syscall_return_slowpath+0x5e0/0x5e0
[  588.521046]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  588.525899]  ? trace_hardirqs_on_caller+0x310/0x310
[  588.530922]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  588.535947]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  588.541506]  ? prepare_exit_to_usermode+0x291/0x3b0
[  588.546519]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  588.551357]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  588.556545] RIP: 0033:0x45a0ea
[  588.559734] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  588.578626] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  588.586340] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  588.593603] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  588.600953] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  588.608226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  588.615490] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
06:23:35 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009000a00090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  588.629861] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  588.666745] gfs2: fsid=dh: error -17 adding sysfs files
[  588.753854] binder: 27753:27762 got transaction with invalid offset (0, min 0 max 24) or object.
[  588.778858] binder: 27753:27762 transaction failed 29201/-22, size 24-8 line 3035
[  588.792341] binder: 27753:27762 unknown command 222220
06:23:35 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:35 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:23:35 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:35 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009023900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  588.800199] binder: 27753:27762 ioctl c0306201 20000140 returned -22
[  588.808537] binder: 27753:27762 got transaction to invalid handle
[  588.815641] binder: 27753:27762 transaction failed 29201/-22, size 0-0 line 2834
[  588.863185] binder_alloc: binder_alloc_mmap_handler: 27753 20001000-20004000 already mapped failed -16
[  588.886928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  588.901318] binder: BINDER_SET_CONTEXT_MGR already set
06:23:35 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10001, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:35 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

[  588.921306] binder: 27753:27762 ioctl 40046207 0 returned -16
[  588.938047] binder_alloc: 27753: binder_alloc_buf, no vma
06:23:35 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009113900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  589.019170] binder: undelivered TRANSACTION_ERROR: 29201
[  589.026798] binder: 27753:27754 transaction failed 29189/-3, size 24-8 line 2973
[  589.029318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  589.034981] binder: undelivered TRANSACTION_ERROR: 29201
06:23:36 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  589.088049] binder: undelivered TRANSACTION_ERROR: 29189
[  589.102157] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  589.120334] gfs2: fsid=dh: Now mounting FS...
[  589.153527] gfs2: not a GFS2 filesystem
[  589.187033] gfs2: fsid=dh: can't read superblock
[  589.221685] gfs2: fsid=dh: can't read superblock: -22
06:23:36 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:36 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009fc3900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000100)=0x80)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

06:23:36 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

[  589.323235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  589.368628] binder_alloc: 27797: binder_alloc_buf, no vma
[  589.405948] binder: 27797:27801 transaction failed 29189/-3, size 0-0 line 2973
[  589.448991] binder_alloc: binder_alloc_mmap_handler: 27797 20001000-20004000 already mapped failed -16
[  589.477348] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  589.496297] CPU: 1 PID: 27807 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  589.500766] binder: BINDER_SET_CONTEXT_MGR already set
[  589.503734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  589.503740] Call Trace:
[  589.503770]  dump_stack+0x244/0x39d
[  589.503791]  ? dump_stack_print_info.cold.1+0x20/0x20
[  589.503811]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  589.503839]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  589.539515]  sysfs_create_dir_ns+0x2a1/0x340
[  589.543936]  ? sysfs_create_mount_point+0xa0/0xa0
[  589.546168] binder: 27797:27801 ioctl 40046207 0 returned -16
[  589.548822]  kobject_add_internal.cold.11+0x116/0x6af
[  589.548841]  ? kobj_ns_type_registered+0x60/0x60
[  589.554845] binder_alloc: 27797: binder_alloc_buf, no vma
[  589.559936]  ? kfree_const+0x59/0x70
[  589.559954]  ? rcu_read_lock_sched_held+0x14f/0x180
[  589.559969]  ? kfree+0x1f8/0x230
[  589.559985]  ? kfree_const+0x5e/0x70
[  589.560004]  kobject_init_and_add+0xf4/0x140
[  589.560018]  ? kobject_add_internal+0x4d0/0x4d0
[  589.560047]  gfs2_sys_fs_add+0x1ff/0x4f0
[  589.583714] binder: 27797:27814 transaction failed 29189/-3, size 24-8 line 2973
[  589.586129]  ? recover_store+0x1a0/0x1a0
[  589.586150]  ? snprintf+0xae/0xe0
[  589.586163]  ? vscnprintf+0x70/0x80
[  589.586186]  ? memcpy+0x45/0x50
[  589.586207]  fill_super+0x89c/0x1a10
[  589.586236]  ? gfs2_online_uevent+0x2b0/0x2b0
[  589.612437] binder: 27797:27811 got transaction to invalid handle
[  589.614498]  ? retint_kernel+0x2d/0x2d
[  589.614520]  ? set_blocksize+0x72/0x340
[  589.614540]  ? __sanitizer_cov_trace_const_cmp8+0x13/0x20
[  589.614557]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  589.614570]  ? set_blocksize+0x2c1/0x340
[  589.614604]  gfs2_mount+0x5e6/0x712
[  589.630786] binder: 27797:27811 transaction failed 29201/-22, size 0-0 line 2834
[  589.635944]  ? fill_super+0x1a10/0x1a10
[  589.635982]  ? alloc_pages_current+0x17b/0x350
[  589.636001]  mount_fs+0xae/0x31d
[  589.636020]  vfs_kern_mount.part.35+0xdc/0x4f0
[  589.636036]  ? may_umount+0xb0/0xb0
[  589.636056]  ? _raw_read_unlock+0x2c/0x50
[  589.656751] binder: release 27797:27801 transaction 2643 out, still active
[  589.659022]  ? __get_fs_type+0x97/0xc0
[  589.659043]  do_mount+0x581/0x31f0
[  589.665611] binder: unexpected work type, 4, not freed
[  589.670200]  ? retint_kernel+0x2d/0x2d
[  589.670235]  ? trace_hardirqs_on_caller+0xc0/0x310
[  589.670275]  ? copy_mount_string+0x40/0x40
[  589.670293]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  589.670312]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  589.670330]  ? retint_kernel+0x2d/0x2d
[  589.687950] binder: undelivered TRANSACTION_COMPLETE
[  589.690476]  ksys_mount+0x12d/0x140
[  589.690495]  __x64_sys_mount+0xbe/0x150
[  589.690516]  do_syscall_64+0x1b9/0x820
[  589.690531]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  589.690546]  ? syscall_return_slowpath+0x5e0/0x5e0
[  589.690563]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  589.703480] binder: undelivered TRANSACTION_ERROR: 29201
[  589.705976]  ? trace_hardirqs_on_caller+0x310/0x310
[  589.705994]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  589.706025]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  589.706040]  ? prepare_exit_to_usermode+0x291/0x3b0
[  589.706060]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  589.720477] binder: undelivered TRANSACTION_ERROR: 29189
[  589.723692]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  589.723705] RIP: 0033:0x45a0ea
[  589.723720] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  589.723727] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  589.723739] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  589.723748] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  589.723756] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  589.723764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  589.723773] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  589.741911] binder: release 27797:27801 transaction 2643 in, still active
[  589.756829] binder: send failed reply for transaction 2643, target dead
06:23:36 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:36 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2000, 0x92)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280)=0xd787, 0x4)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2)
getpeername$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c)
r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000080)="24d4f5b2c756df0251a3520d529ba77c781cbb0fc4cc5e4f5a023d8dd1728c8a95562ddbe920b3155310b77822b2ad7158c59b557168d814f34036c20b78b4d0c40b58deb0e8a98c8b7657ae819232f52840d3c8596d58f52d20eca0c70fb157f5ebf76156019bd5fa61e82164a1b224b7a64ab21f82dda4112d1e61884bb1ef2535a4434cfdcc786fcd310bae1d7391fa5753a8517026aa042a3aa42e69bcdf7ce7632e2a44a0e10a58857c363a39a6ffe0eb380bdca606e502fa46a3525aca064343946aa4f2155b4810bf9bf3ae052cc0fa12ff94", 0xd6)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000040)='\x00')

06:23:36 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:23:36 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009004800090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  589.764503] binder: undelivered TRANSACTION_ERROR: 29189
[  589.786490] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  589.809255] gfs2: fsid=dh: error -17 adding sysfs files
06:23:36 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000100)=0x80)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

[  589.990453] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  590.004657] binder: 27820:27824 got transaction to context manager from process owning it
[  590.015530] binder: 27820:27824 transaction failed 29201/-22, size 24-8 line 2825
[  590.026234] binder: 27820:27824 got transaction to invalid handle
06:23:36 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009063900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:36 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

06:23:37 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x80000)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000006c0)={0xc3, 0x45e, 0xffffffffffffffff, 0xfffffffffffffeff, 0x2800000000000, 0xae, 0x6, 0x5, 0x401, 0x72a, 0x1}, 0xb)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100)
ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0xc, {0x3, 0x2000000f8, 0x10000000000001, 0xe2}, {0xfd4, 0x204fa, 0x6e9, 0xfffffffffffffff7}, {0x0, 0x5162}})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r4, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000500)={<r5=>0x0, @in={{0x2, 0x4e20, @remote}}, 0x3, 0x1}, &(0x7f00000005c0)=0x90)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000700), 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000600)={r5, 0x8e48}, &(0x7f0000000640)=0x8)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  590.037278] binder_alloc: binder_alloc_mmap_handler: 27820 20001000-20004000 already mapped failed -16
[  590.048499] binder: BINDER_SET_CONTEXT_MGR already set
[  590.055112] binder: 27820:27824 ioctl 40046207 0 returned -16
[  590.103774] binder_alloc: 27820: binder_alloc_buf, no vma
[  590.126126] binder: 27820:27834 got transaction to invalid handle
[  590.151006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  590.173245] binder_alloc: 27837: binder_alloc_buf, no vma
06:23:37 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000005c0)={0x800100f, 0x3, 0x1})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001800)={0x96, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000018c0))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, {0x1, 0x3, 0x2, 0x3}}, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000380)=ANY=[@ANYBLOB="d5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"])
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c63400173b602ea06f3a6"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:37 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

[  590.248903] binder: release 27837:27841 transaction 2655 out, still active
[  590.268845] binder: unexpected work type, 4, not freed
[  590.285886] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  590.293450] gfs2: fsid=dh: Now mounting FS...
06:23:37 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090a3900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  590.304443] binder: undelivered TRANSACTION_COMPLETE
[  590.324938] gfs2: not a GFS2 filesystem
[  590.355195] binder: BINDER_SET_CONTEXT_MGR already set
[  590.364793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  590.372059] gfs2: fsid=dh: can't read superblock
[  590.379112] binder: 27851:27854 ioctl 40046207 0 returned -16
[  590.389444] binder: release 27837:27841 transaction 2655 in, still active
[  590.407654] binder: send failed reply for transaction 2655, target dead
[  590.414677] gfs2: fsid=dh: can't read superblock: -22
[  590.504860] binder: 27851:27862 unknown command 20996876
[  590.523793] binder: 27851:27862 ioctl c0306201 20000140 returned -22
[  590.537526] binder: 27851:27854 got transaction to invalid handle
[  590.555950] binder_alloc: binder_alloc_mmap_handler: 27851 20001000-20004000 already mapped failed -16
[  590.589880] binder_alloc: 27851: binder_alloc_buf, no vma
[  590.596604] binder: 27851:27864 unknown command 20996876
[  590.603317] binder: 27851:27864 ioctl c0306201 20000140 returned -22
[  590.611237] binder: 27851:27862 got transaction to invalid handle
06:23:37 executing program 2:
r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x11}}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet6_sctp(0xa, 0x400000001, 0x84)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mixer\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={r2, 0x0, 0x678d3b87aa7238d6, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x4e230000ffffff8d, @dev}}, 0x4, 0x0, 0x0, 0x0, 0xd}, 0x98)

06:23:37 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x80)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000380)={0x52, "8624d14cfebf5035f26a4e78bf21359bf0a8fbd615a4e9be37ab01e0feb6b6c6", 0x2, 0x33d2, 0x1, 0x320100, 0x2})
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c6300005f88623373e3e765c481f4f7f29b67649b925f06f3ffcb62a274beda2f3ec4d4e1d33726c7b67c512f796201c97b633980edf354cb11aa66e56696b234258e10839308e63378a3d0264744d7aaa68f2ebbd5355e6fa05eb2c3be375779d614e1a09f969dfa73e4ba2c1395416add09e8474fde7e45c1d8b0a4262c7b421ebf392249c9f23ef4e034dd35a199dedf7978c25ea6ae4b5051d1d5021345cf0e7b"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:37 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:23:37 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x80000)
getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x100)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={<r4=>0x0, 0xb4}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x543, 0x3, 0xc26, 0x40, 0x3ff}, &(0x7f0000000180)=0x98)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:37 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009123900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:37 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:37 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

[  590.913404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  590.924344] binder_alloc: 27868: binder_alloc_buf, no vma
[  590.969814] binder_alloc: binder_alloc_mmap_handler: 27868 20001000-20004000 already mapped failed -16
06:23:37 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090f3900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:37 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040))

06:23:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  591.029261] binder: BINDER_SET_CONTEXT_MGR already set
[  591.038709] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  591.054841] gfs2: fsid=dh: Now mounting FS...
[  591.061360] binder: 27868:27878 ioctl 40046207 0 returned -16
[  591.066866] gfs2: not a GFS2 filesystem
[  591.071691] gfs2: fsid=dh: can't read superblock
[  591.085511] gfs2: fsid=dh: can't read superblock: -22
06:23:38 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

[  591.126160] binder_alloc: 27868: binder_alloc_buf, no vma
[  591.137339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.159276] binder: release 27868:27878 transaction 2665 out, still active
[  591.173549] binder: unexpected work type, 4, not freed
[  591.198769] binder: undelivered TRANSACTION_COMPLETE
06:23:38 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x200, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000000000000000040000000000000000000000040000e50000000000000026630800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  591.237676] binder: release 27868:27878 transaction 2665 in, still active
[  591.263691] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
06:23:38 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090b3900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  591.289007] binder: send failed reply for transaction 2665, target dead
[  591.293584] CPU: 1 PID: 27899 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  591.303173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  591.303180] Call Trace:
[  591.303204]  dump_stack+0x244/0x39d
[  591.303231]  ? dump_stack_print_info.cold.1+0x20/0x20
[  591.323987]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  591.329126]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  591.333550]  sysfs_create_dir_ns+0x2a1/0x340
[  591.333569]  ? sysfs_create_mount_point+0xa0/0xa0
[  591.333594]  ? kobject_namespace+0x75/0x1a0
[  591.333612]  ? kobject_namespace+0x98/0x1a0
[  591.333631]  kobject_add_internal.cold.11+0x116/0x6af
[  591.333652]  ? kobj_ns_type_registered+0x60/0x60
[  591.361428]  ? kfree_const+0x59/0x70
[  591.365144]  ? rcu_read_lock_sched_held+0x14f/0x180
[  591.370152]  ? kfree+0x1f8/0x230
[  591.373513]  ? kfree_const+0x5e/0x70
[  591.377224]  kobject_init_and_add+0xf4/0x140
[  591.381622]  ? kobject_add_internal+0x4d0/0x4d0
[  591.386287]  ? vsnprintf+0x20d/0x1b60
[  591.390085]  gfs2_sys_fs_add+0x1ff/0x4f0
[  591.394140]  ? recover_store+0x1a0/0x1a0
[  591.398212]  ? snprintf+0xae/0xe0
[  591.401656]  ? vscnprintf+0x70/0x80
[  591.405286]  ? memcpy+0x45/0x50
[  591.408579]  fill_super+0x89c/0x1a10
[  591.412286]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  591.417731]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  591.423276]  ? vsnprintf+0x20d/0x1b60
[  591.427072]  ? gfs2_online_uevent+0x2b0/0x2b0
[  591.431560]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  591.436312]  ? retint_kernel+0x2d/0x2d
[  591.440197]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  591.445211]  ? set_blocksize+0x2c1/0x340
[  591.449271]  gfs2_mount+0x5e6/0x712
[  591.452893]  ? fill_super+0x1a10/0x1a10
[  591.456880]  ? alloc_pages_current+0x17b/0x350
[  591.461466]  mount_fs+0xae/0x31d
[  591.464832]  vfs_kern_mount.part.35+0xdc/0x4f0
[  591.469408]  ? may_umount+0xb0/0xb0
[  591.473126]  ? _raw_read_unlock+0x3f/0x50
[  591.477267]  ? __get_fs_type+0x97/0xc0
[  591.481506]  do_mount+0x581/0x31f0
[  591.485043]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  591.490493]  ? copy_mount_string+0x40/0x40
[  591.494739]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  591.499494]  ? retint_kernel+0x2d/0x2d
[  591.503383]  ? copy_mount_options+0x25c/0x430
[  591.507890]  ? __sanitizer_cov_trace_const_cmp4+0x11/0x20
[  591.513421]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  591.518959]  ? copy_mount_options+0x315/0x430
[  591.523455]  ksys_mount+0x12d/0x140
[  591.527091]  __x64_sys_mount+0xbe/0x150
[  591.531060]  do_syscall_64+0x1b9/0x820
[  591.534938]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  591.540294]  ? syscall_return_slowpath+0x5e0/0x5e0
[  591.545305]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  591.550141]  ? trace_hardirqs_on_caller+0x310/0x310
[  591.555150]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  591.560157]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  591.565684]  ? prepare_exit_to_usermode+0x291/0x3b0
[  591.570698]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  591.575538]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  591.580721] RIP: 0033:0x45a0ea
[  591.584003] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  591.602908] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  591.610604] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  591.617864] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  591.625385] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  591.632645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  591.639902] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  591.691868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.709637] binder: 27907:27913 unknown command 8
[  591.730455] binder: 27907:27913 ioctl c0306201 200000c0 returned -22
[  591.749060] binder: 27907:27913 unknown command 134243084
[  591.753236] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  591.762280] binder: 27907:27913 ioctl c0306201 20000140 returned -22
[  591.780909] binder: 27907:27913 got transaction to invalid handle
[  591.782010] gfs2: fsid=dh: error -17 adding sysfs files
[  591.799136] binder_alloc: binder_alloc_mmap_handler: 27907 20001000-20004000 already mapped failed -16
[  591.809542] binder: BINDER_SET_CONTEXT_MGR already set
[  591.815229] binder: 27907:27916 ioctl 40046207 0 returned -16
[  591.823894] binder: 27907:27913 unknown command 8
[  591.830971] binder: 27907:27913 ioctl c0306201 200000c0 returned -22
[  591.838764] binder: 27907:27916 unknown command 134243084
[  591.844824] binder: 27907:27916 ioctl c0306201 20000140 returned -22
06:23:38 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:38 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:23:38 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009000300090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:38 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x4000)
ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x9})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:38 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x804)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xd36f, 0x80000000, 0x1f, 0x3e}})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
inotify_init()

06:23:38 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:38 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

[  591.943847] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  591.953374] binder_alloc: 27925: binder_alloc_buf, no vma
[  591.983086] binder_alloc: binder_alloc_mmap_handler: 27925 20001000-20004000 already mapped failed -16
[  592.020597] binder: BINDER_SET_CONTEXT_MGR already set
[  592.026950] binder: 27925:27927 ioctl 40046207 0 returned -16
[  592.043255] binder_alloc: 27925: binder_alloc_buf, no vma
06:23:39 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:39 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009033900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  592.064979] binder: 27925:27930 got transaction to invalid handle
[  592.073918] binder: release 27925:27927 transaction 2673 out, still active
[  592.107311] binder: unexpected work type, 4, not freed
[  592.150407] binder: undelivered TRANSACTION_COMPLETE
[  592.163428] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  592.182971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:39 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

[  592.198324] binder: release 27925:27927 transaction 2673 in, still active
[  592.210705] gfs2: fsid=dh: Now mounting FS...
[  592.220957] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  592.236756] binder: send failed reply for transaction 2673, target dead
[  592.240508] CPU: 1 PID: 27943 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  592.250940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  592.260308] Call Trace:
[  592.262902]  dump_stack+0x244/0x39d
[  592.266531]  ? dump_stack_print_info.cold.1+0x20/0x20
[  592.271722]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  592.276824]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  592.281228]  sysfs_create_dir_ns+0x2a1/0x340
[  592.285630]  ? sysfs_create_mount_point+0xa0/0xa0
[  592.290499]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  592.295271]  kobject_add_internal.cold.11+0x116/0x6af
[  592.300458]  ? kobj_ns_type_registered+0x60/0x60
[  592.305210]  ? kfree_const+0x59/0x70
[  592.308921]  ? rcu_read_lock_sched_held+0x14f/0x180
[  592.313938]  ? kfree+0x1f8/0x230
[  592.317300]  ? kfree_const+0x5e/0x70
[  592.321009]  kobject_init_and_add+0xf4/0x140
[  592.325425]  ? kobject_add_internal+0x4d0/0x4d0
[  592.330091]  ? vsnprintf+0x20d/0x1b60
[  592.333893]  gfs2_sys_fs_add+0x1ff/0x4f0
[  592.337948]  ? recover_store+0x1a0/0x1a0
[  592.342007]  ? snprintf+0xae/0xe0
[  592.345461]  ? vscnprintf+0x70/0x80
[  592.349088]  ? memcpy+0x45/0x50
[  592.352372]  fill_super+0x89c/0x1a10
[  592.356088]  ? gfs2_online_uevent+0x2b0/0x2b0
[  592.360661]  ? retint_kernel+0x2d/0x2d
[  592.364544]  ? set_blocksize+0x19b/0x340
[  592.368600]  ? __sanitizer_cov_trace_pc+0x1/0x50
[  592.373349]  ? set_blocksize+0x2c1/0x340
[  592.377420]  gfs2_mount+0x5e6/0x712
[  592.381146]  ? fill_super+0x1a10/0x1a10
[  592.385137]  ? alloc_pages_current+0x17b/0x350
[  592.389715]  mount_fs+0xae/0x31d
[  592.393079]  vfs_kern_mount.part.35+0xdc/0x4f0
[  592.397662]  ? may_umount+0xb0/0xb0
[  592.401290]  ? _raw_read_unlock+0x2c/0x50
[  592.405432]  ? __get_fs_type+0x97/0xc0
[  592.409317]  do_mount+0x581/0x31f0
[  592.412944]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  592.418390]  ? retint_kernel+0x1b/0x2d
[  592.422626]  ? copy_mount_string+0x40/0x40
[  592.426861]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  592.431619]  ? retint_kernel+0x2d/0x2d
[  592.435519]  ? copy_mount_options+0x239/0x430
[  592.440014]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  592.444942]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  592.450484]  ? copy_mount_options+0x315/0x430
[  592.454977]  ksys_mount+0x12d/0x140
[  592.458607]  __x64_sys_mount+0xbe/0x150
[  592.462581]  do_syscall_64+0x1b9/0x820
[  592.466462]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  592.471907]  ? syscall_return_slowpath+0x5e0/0x5e0
[  592.476850]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  592.481694]  ? trace_hardirqs_on_caller+0x310/0x310
[  592.486710]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  592.491724]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  592.497268]  ? prepare_exit_to_usermode+0x291/0x3b0
[  592.502282]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  592.507233]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  592.512416] RIP: 0033:0x45a0ea
[  592.515609] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  592.534508] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  592.542229] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  592.549496] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
[  592.556760] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  592.564022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  592.571290] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  592.586182] gfs2: not a GFS2 filesystem
06:23:39 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009093900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:39 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

[  592.607520] gfs2: fsid=dh: can't read superblock
[  592.615182] gfs2: fsid=dh: can't read superblock: -22
[  592.661620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  592.715765] binder_release_work: 13 callbacks suppressed
[  592.715774] binder: undelivered TRANSACTION_ERROR: 29201
[  592.737294] binder: undelivered TRANSACTION_ERROR: 29189
[  592.764460] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  592.784727] gfs2: fsid=dh: error -17 adding sysfs files
06:23:39 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={<r2=>0x0, 0xca, "eb2e19e08c802a34d57f05cb7b817ce5d418e13da919c3b3eb14ae2041acea2a399e49d5ed3ea80b99683fb255f4f4f3100b13555c0835e12ca6095558731a3e1c912dc1252edd5e5c647935f89c70366377b6bfc635ddfe8371a328daa72028e0ce38fdcb4e1bfc5080a8860fc032a16114c5fe4dda644b502093702630ea6ca3197af36f7ddef03bf603de776abcb2e6a18cd9939651cde8d35e1000b664ef9f28c7316bcfe7f5caec9e47c927769bf6ccbf18cea758ead49410d288dd3bb4e223c83241973d82eb88"}, &(0x7f0000000180)=0xd2)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8000, 0x174, 0x1000, 0x3b729c7e}, &(0x7f00000001c0)=0x98)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:39 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

06:23:39 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:39 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009083900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:39 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  592.978364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  592.982370] binder_alloc: 27969: binder_alloc_buf, no vma
[  592.991673] binder_transaction: 14 callbacks suppressed
[  592.991695] binder: 27969:27974 transaction failed 29189/-3, size 0-0 line 2973
06:23:39 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

06:23:39 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009073900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  593.021738] binder_alloc: binder_alloc_mmap_handler: 27969 20001000-20004000 already mapped failed -16
[  593.042370] binder: BINDER_SET_CONTEXT_MGR already set
[  593.048334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:40 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
ptrace$peekuser(0x3, r1, 0x8000)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:40 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  593.136835] binder: 27969:27975 ioctl 40046207 0 returned -16
[  593.158324] binder: release 27969:27974 transaction 2680 out, still active
[  593.177243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  593.228145] binder: unexpected work type, 4, not freed
[  593.244405] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  593.267040] binder: undelivered TRANSACTION_COMPLETE
06:23:40 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009053900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  593.274897] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  593.285494] gfs2: fsid=dh: Now mounting FS...
[  593.293234] gfs2: not a GFS2 filesystem
[  593.303159] binder: release 27969:27974 transaction 2680 in, still active
[  593.310481] gfs2: fsid=dh: can't read superblock
[  593.320287] gfs2: fsid=dh: can't read superblock: -22
[  593.326341] CPU: 1 PID: 27991 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  593.333747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  593.343126] Call Trace:
[  593.345748]  dump_stack+0x244/0x39d
[  593.349418]  ? dump_stack_print_info.cold.1+0x20/0x20
[  593.354651]  ? vprintk_func+0x85/0x181
[  593.358583]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  593.363152]  sysfs_create_dir_ns+0x2a1/0x340
[  593.367596]  ? sysfs_create_mount_point+0xa0/0xa0
[  593.370918] binder: send failed reply for transaction 2680, target dead
[  593.372491]  ? kobject_namespace+0x75/0x1a0
[  593.372508]  ? kobject_namespace+0x98/0x1a0
[  593.372527]  kobject_add_internal.cold.11+0x116/0x6af
[  593.372543]  ? kobj_ns_type_registered+0x60/0x60
[  593.372560]  ? kfree_const+0x59/0x70
[  593.372578]  ? rcu_read_lock_sched_held+0x14f/0x180
[  593.372593]  ? kfree+0x1f8/0x230
[  593.372609]  ? kfree_const+0x5e/0x70
[  593.372626]  kobject_init_and_add+0xf4/0x140
[  593.386354] binder: undelivered TRANSACTION_ERROR: 29189
[  593.388121]  ? kobject_add_internal+0x4d0/0x4d0
[  593.388146]  ? vsnprintf+0x20d/0x1b60
[  593.388173]  gfs2_sys_fs_add+0x1ff/0x4f0
[  593.388188]  ? recover_store+0x1a0/0x1a0
[  593.388207]  ? snprintf+0xae/0xe0
[  593.388221]  ? vscnprintf+0x70/0x80
[  593.388242]  ? memcpy+0x45/0x50
[  593.388272]  fill_super+0x89c/0x1a10
[  593.454342]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.459881]  ? vsnprintf+0x20d/0x1b60
[  593.463775]  ? gfs2_online_uevent+0x2b0/0x2b0
[  593.468272]  ? pointer+0x900/0x900
[  593.471805]  ? match_strlcpy+0xcc/0x110
[  593.475777]  ? gfs2_mount_args+0x972/0xb10
[  593.480009]  ? snprintf+0xae/0xe0
[  593.484082]  ? vsprintf+0x40/0x40
[  593.487540]  ? gfs2_kill_sb+0x1a0/0x1a0
[  593.491531]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  593.496545]  ? set_blocksize+0x2c1/0x340
[  593.500625]  gfs2_mount+0x5e6/0x712
[  593.504249]  ? fill_super+0x1a10/0x1a10
[  593.508246]  ? alloc_pages_current+0x17b/0x350
[  593.512850]  mount_fs+0xae/0x31d
[  593.516220]  vfs_kern_mount.part.35+0xdc/0x4f0
[  593.520801]  ? may_umount+0xb0/0xb0
[  593.524427]  ? _raw_read_unlock+0x2c/0x50
[  593.528570]  ? __get_fs_type+0x97/0xc0
[  593.532458]  do_mount+0x581/0x31f0
[  593.535996]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  593.541443]  ? retint_kernel+0x1b/0x2d
[  593.545327]  ? copy_mount_string+0x40/0x40
[  593.549558]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  593.554329]  ? retint_kernel+0x2d/0x2d
[  593.558219]  ? copy_mount_options+0x239/0x430
[  593.562716]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  593.567569]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  593.573102]  ? copy_mount_options+0x315/0x430
[  593.577602]  ksys_mount+0x12d/0x140
[  593.581229]  __x64_sys_mount+0xbe/0x150
[  593.585209]  do_syscall_64+0x1b9/0x820
[  593.589210]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  593.594571]  ? syscall_return_slowpath+0x5e0/0x5e0
[  593.599496]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  593.604338]  ? trace_hardirqs_on_caller+0x310/0x310
[  593.609359]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  593.614894]  ? prepare_exit_to_usermode+0x291/0x3b0
[  593.619912]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  593.625036]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  593.630220] RIP: 0033:0x45a0ea
[  593.633420] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  593.653026] RSP: 002b:00007f21b07a0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  593.660735] RAX: ffffffffffffffda RBX: 00007f21b07a0b30 RCX: 000000000045a0ea
[  593.668103] RDX: 00007f21b07a0ad0 RSI: 0000000020000380 RDI: 00007f21b07a0af0
06:23:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffe0f, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1b1, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:40 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

[  593.675369] RBP: 0000000020000380 R08: 00007f21b07a0b30 R09: 00007f21b07a0ad0
[  593.682637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  593.689903] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  593.710022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:40 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009133900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  593.758822] binder: 28005:28007 ioctl c0306201 20000100 returned -14
[  593.763866] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  593.785185] gfs2: fsid=dh: error -17 adding sysfs files
06:23:40 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

[  593.823914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  593.826737] binder: 28005:28013 got transaction to invalid handle
[  593.847768] binder: 28005:28013 transaction failed 29201/-22, size 0-0 line 2834
06:23:40 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:40 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009043900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:40 executing program 2:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2800)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xffffffffffffffff, 0x0)
close(r0)

06:23:40 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:23:40 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fdatasync(r0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  594.017961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:23:41 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0)

06:23:41 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009603900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:41 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

[  594.220515] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  594.234987] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  594.242257] gfs2: fsid=dh: Now mounting FS...
[  594.248205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
[  594.260902] gfs2: not a GFS2 filesystem
[  594.266864] gfs2: fsid=dh: can't read superblock
[  594.272088] gfs2: fsid=dh: can't read superblock: -22
[  594.282308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.289306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
[  594.544337] binder_alloc: binder_alloc_mmap_handler: 28005 20001000-20004000 already mapped failed -16
[  594.554763] binder: BINDER_SET_CONTEXT_MGR already set
[  594.560393] binder: 28005:28058 ioctl c0306201 20000100 returned -14
[  594.567289] binder: 28005:28013 ioctl 40046207 0 returned -16
[  594.574255] binder: 28005:28059 got transaction to invalid handle
[  594.580973] binder: 28005:28059 transaction failed 29201/-22, size 0-0 line 2834
[  594.589268] binder: undelivered TRANSACTION_ERROR: 29201
06:23:41 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0073408501"], 0x0, 0x0, 0x0})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101200, 0x0)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0xffffffffffffffe0, 0x2de})

06:23:41 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
recvmsg(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000000)=""/25)
sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={<r4=>0x0, 0x6, 0x1}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x8, @loopback}}, 0x2, 0x7fffffff}, &(0x7f0000000200)=0x90)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x100)
readlinkat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8)
getegid()
lseek(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x65)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0)

06:23:41 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009103900090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:41 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0)

[  594.596175] binder: undelivered TRANSACTION_ERROR: 29201
[  594.658139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.683192] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:41 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

06:23:41 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009000a00090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:41 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:41 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0)

[  594.738979] binder: 28068:28072 unknown command -2059373824
[  594.783472] binder: 28068:28072 ioctl c0306201 20000040 returned -22
[  594.807941] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:41 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:23:41 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009000300090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  594.833063] binder_alloc: binder_alloc_mmap_handler: 28068 20001000-20004000 already mapped failed -16
[  594.888614] binder: BINDER_SET_CONTEXT_MGR already set
[  594.906376] binder: 28068:28072 ioctl 40046207 0 returned -16
[  594.916436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
[  594.925647] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
06:23:41 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  594.965782] binder_alloc: 28068: binder_alloc_buf, no vma
[  594.974931] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  594.993902] binder: 28068:28096 transaction failed 29189/-3, size 24-8 line 2973
[  595.022425] binder: 28068:28072 unknown command -2059373824
[  595.054580] binder: release 28068:28072 transaction 2688 out, still active
[  595.065006] binder: 28068:28072 ioctl c0306201 20000040 returned -22
06:23:42 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009004800090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  595.072336] binder: unexpected work type, 4, not freed
[  595.079102] gfs2: fsid=dh: Now mounting FS...
[  595.111107] binder: undelivered TRANSACTION_COMPLETE
[  595.162240] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  595.167706] gfs2: not a GFS2 filesystem
[  595.174650] binder: undelivered TRANSACTION_ERROR: 29189
[  595.183550] gfs2: fsid=dh: can't read superblock
[  595.202842] gfs2: fsid=dh: can't read superblock: -22
06:23:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00404001efdaf1cad0451779a3161cbf1ac08a"], 0x0, 0x0, 0x0})

06:23:42 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0)

06:23:42 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x40000002)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x2)
r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x40, 0x4000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4010)

06:23:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

[  595.212068] binder: send failed reply for transaction 2688, target dead
06:23:42 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000a0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  595.286096] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  595.289033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
06:23:42 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0)

[  595.334400] binder: 28115:28116 unknown command 20987904
[  595.359247] binder: 28115:28116 ioctl c0306201 20000040 returned -22
[  595.410018] binder_alloc: binder_alloc_mmap_handler: 28115 20001000-20004000 already mapped failed -16
[  595.470152] binder: BINDER_SET_CONTEXT_MGR already set
[  595.486827] binder: 28115:28116 ioctl 40046207 0 returned -16
[  595.509015] binder_alloc: 28115: binder_alloc_buf, no vma
[  595.514529] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  595.514916] binder: 28115:28126 transaction failed 29189/-3, size 24-8 line 2973
[  595.531966] binder: 28115:28122 unknown command 20987904
[  595.550057] binder: 28115:28122 ioctl c0306201 20000040 returned -22
[  595.558247] binder: release 28115:28116 transaction 2693 out, still active
[  595.570057] binder: unexpected work type, 4, not freed
[  595.588922] binder: undelivered TRANSACTION_COMPLETE
[  595.607978] binder: undelivered TRANSACTION_ERROR: 29189
[  595.645713] binder: release 28115:28116 transaction 2693 in, still active
[  595.654050] binder: send failed reply for transaction 2693, target dead
06:23:42 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:23:42 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")
socket$nl_generic(0x10, 0x3, 0x10)

06:23:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffe61, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xfffffffffffffd57, 0x0, &(0x7f0000000480)="f27aec438173cefc2a394072b6ad8809e53ac6553db7f225a4e477a2e58ad6ec6454ad779316094e4bee8cab76761555d367fb3c728f045f7d7d1802000000000000000000000000"})
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x80200)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000001c0)={0x5, [0x1, 0x1, 0x90, 0x7, 0x0]}, &(0x7f0000000280)=0xe)
setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140)=0x1f, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00754a20723e5b1bfbce03e4404401"], 0x0, 0x0, 0x0})

06:23:42 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003910090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:42 executing program 3:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x280, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:42 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r4, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:42 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003912090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  595.749347] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  595.772731] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:42 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
read(r1, &(0x7f0000000000)=""/245, 0xf5)

[  595.832091] binder: 28134:28148 unknown command 541750528
[  595.844509] binder: 28134:28148 ioctl c0306201 20000040 returned -22
[  595.900370] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
06:23:42 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

06:23:42 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
socket$inet6_udplite(0xa, 0x2, 0x88)

[  595.946813] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  596.109255] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  596.170257] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  596.177488] gfs2: fsid=dh: Now mounting FS...
[  596.198233] gfs2: not a GFS2 filesystem
[  596.203705] gfs2: fsid=dh: can't read superblock
[  596.210086] gfs2: fsid=dh: can't read superblock: -22
06:23:43 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:23:43 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900070023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:43 executing program 3:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80000, 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)

06:23:43 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

[  596.582882] binder_alloc: binder_alloc_mmap_handler: 28134 20001000-20004000 already mapped failed -16
[  596.602005] binder: BINDER_SET_CONTEXT_MGR already set
[  596.612381] binder: 28134:28148 ioctl 40046207 0 returned -16
[  596.628078] binder_alloc: 28134: binder_alloc_buf, no vma
[  596.633893] binder: 28134:28187 transaction failed 29189/-3, size 24-8 line 2973
[  596.656587] binder: 28134:28193 unknown command 541750528
[  596.669148] binder: 28134:28193 ioctl c0306201 20000040 returned -22
[  596.678727] binder: release 28134:28142 transaction 2698 out, still active
[  596.707294] binder: unexpected work type, 4, not freed
06:23:43 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

06:23:43 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003908090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:43 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:43 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140))
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:43 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r2 = memfd_create(&(0x7f0000000100)='--\x00', 0x4)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000180)={0xfff, 0x513, 0x7, 0x2, 0x7})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  596.730581] binder: undelivered TRANSACTION_COMPLETE
[  596.742238] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  596.752069] binder: undelivered TRANSACTION_ERROR: 29189
[  596.755825] gfs2: fsid=dh: Now mounting FS...
[  596.759042] binder: send failed reply for transaction 2698, target dead
06:23:43 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  596.794244] gfs2: not a GFS2 filesystem
[  596.800320] gfs2: fsid=dh: can't read superblock
[  596.810053] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  596.812941] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  596.835187] gfs2: fsid=dh: can't read superblock: -22
06:23:43 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:23:43 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900480023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  596.876028] binder_alloc: 28204: binder_alloc_buf, no vma
[  596.896392] binder: 28204:28207 transaction failed 29189/-3, size 0-0 line 2973
[  596.953666] binder_alloc: binder_alloc_mmap_handler: 28204 20001000-20004000 already mapped failed -16
[  597.002567] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  597.005484] binder: BINDER_SET_CONTEXT_MGR already set
[  597.015374] binder: 28204:28207 ioctl 40046207 0 returned -16
[  597.026435] binder_alloc: 28204: binder_alloc_buf, no vma
[  597.044724] binder: 28204:28218 transaction failed 29189/-3, size 24-8 line 2973
[  597.053668] binder: 28204:28218 got transaction to invalid handle
[  597.060658] binder: 28204:28218 transaction failed 29201/-22, size 0-0 line 2834
[  597.069780] binder: release 28204:28207 transaction 2703 out, still active
[  597.079746] binder: unexpected work type, 4, not freed
[  597.126162] binder: undelivered TRANSACTION_COMPLETE
[  597.131405] binder: undelivered TRANSACTION_ERROR: 29201
[  597.161829] binder: undelivered TRANSACTION_ERROR: 29189
[  597.216457] binder: release 28204:28207 transaction 2703 in, still active
[  597.223548] binder: send failed reply for transaction 2703, target dead
06:23:44 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:44 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

06:23:44 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003909090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)

06:23:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:44 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x17, 0x3, 0x2, 0x3, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x48d3}]}, 0x18}}, 0x4000040)

06:23:44 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003904090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  597.417503] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  597.433662] binder_alloc: 28232: binder_alloc_buf, no vma
[  597.454434] binder: 28232:28234 transaction failed 29189/-3, size 0-0 line 2973
06:23:44 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

06:23:44 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x20, 0xffffffff, 0x5, 0x120000000000, 0x0, 0x800, 0x0, 0xa, 0x8001, 0x1ff, 0x7fffffff, 0x0, 0x6, 0x3, 0x2, 0x2, 0xd0d2, 0x1f, 0x5, 0x7447, 0x80000000, 0x1f, 0x6, 0x1, 0x4c, 0x9, 0x5, 0x0, 0x2, 0x71f4d091, 0x3, 0x2, 0x1f, 0x3, 0x1, 0x18bc, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x2}, 0x20000, 0xad23, 0x800, 0x5, 0x1, 0x8000, 0x1}, 0x0, 0x1, r0, 0x2)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  597.508192] binder_alloc: binder_alloc_mmap_handler: 28232 20001000-20004000 already mapped failed -16
06:23:44 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040))
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  597.587315] binder: BINDER_SET_CONTEXT_MGR already set
[  597.596593] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  597.638596] binder: 28232:28234 ioctl 40046207 0 returned -16
[  597.677770] binder_alloc: 28232: binder_alloc_buf, no vma
[  597.684656] binder: 28232:28243 got transaction to invalid handle
06:23:44 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

06:23:44 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  597.726723] binder: release 28232:28234 transaction 2710 out, still active
[  597.738789] binder: unexpected work type, 4, not freed
[  597.766988] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  597.795395] binder: undelivered TRANSACTION_COMPLETE
[  597.800601] binder_release_work: 1 callbacks suppressed
[  597.800607] binder: undelivered TRANSACTION_ERROR: 29201
06:23:44 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003903090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a627300000000ee0ae3e573d97875d961b48dd71ae8a30f8b942dbf216fd7a5470fbf19086c71e9508656bc40327056cfbd4d17214740d708d4b977f67dcfda3fda78a57ff4f430f9bad94127e8e23322a49ad2ce4e6aad0a6f6e5b01b3588bd058d03bf66a7cf7184f3febc3a2117c16b237014dabe39eaf7007408095183b9171a0", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  597.822759] gfs2: fsid=dh: Now mounting FS...
[  597.861930] binder: undelivered TRANSACTION_ERROR: 29189
[  597.895814] gfs2: not a GFS2 filesystem
06:23:44 executing program 3:
socket$can_raw(0x1d, 0x3, 0x1)
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000440)={<r3=>0x0, 0x1000, "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"}, &(0x7f0000001480)=0x1008)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000014c0)={r3, 0x1, 0x10}, &(0x7f0000001500)=0xc)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  597.911242] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  597.933264] binder: release 28232:28234 transaction 2710 in, still active
[  597.945150] gfs2: fsid=dh: can't read superblock
[  597.968767] binder: send failed reply for transaction 2710, target dead
[  597.993950] binder_alloc: 28270: binder_alloc_buf, no vma
[  598.000420] gfs2: fsid=dh: can't read superblock: -22
[  598.016184] binder: undelivered TRANSACTION_ERROR: 29189
[  598.033287] binder_transaction: 2 callbacks suppressed
[  598.033305] binder: 28270:28275 transaction failed 29189/-3, size 0-0 line 2973
[  598.089134] binder_alloc: binder_alloc_mmap_handler: 28270 20001000-20004000 already mapped failed -16
[  598.126078] binder: BINDER_SET_CONTEXT_MGR already set
[  598.138457] binder: 28270:28275 ioctl 40046207 0 returned -16
[  598.158298] binder_alloc: 28270: binder_alloc_buf, no vma
[  598.176713] binder: 28270:28280 transaction failed 29189/-3, size 24-8 line 2973
[  598.191771] binder: 28270:28284 got transaction to invalid handle
[  598.199595] binder: 28270:28284 transaction failed 29201/-22, size 0-0 line 2834
[  598.209470] binder: release 28270:28275 transaction 2717 out, still active
[  598.232531] binder: unexpected work type, 4, not freed
[  598.249651] binder: undelivered TRANSACTION_COMPLETE
[  598.270651] binder: undelivered TRANSACTION_ERROR: 29201
06:23:45 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:45 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000d0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:45 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

06:23:45 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, 0xffffffffffffffff, 0x0)

06:23:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c630000aa4d9223be94164220a4fec5e9e0db491bebf315bb7520814c5c5043699b958b856841f5ad6b8babd3d0ff220b27efcb0b26b5b5974a169efc2bcfbe993a66ca8a9cc49777f06c935340f9bdc8f8a665b3f7429ba9b27fe70dbee38c730ab35fcceb3ce695334ed7c3e061d4a43e"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

[  598.305443] binder: undelivered TRANSACTION_ERROR: 29189
[  598.312939] binder: release 28270:28275 transaction 2717 in, still active
[  598.320523] binder: send failed reply for transaction 2717, target dead
[  598.335972] binder: undelivered TRANSACTION_ERROR: 29189
06:23:45 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

06:23:45 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000900390a090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:45 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  598.469810] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  598.510897] binder_alloc: 28295: binder_alloc_buf, no vma
06:23:45 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:23:45 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003902090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  598.568502] binder: 28295:28307 transaction failed 29189/-3, size 0-0 line 2973
[  598.594296] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  598.632337] gfs2: fsid=dh: Now mounting FS...
[  598.660563] binder_alloc: binder_alloc_mmap_handler: 28295 20001000-20004000 already mapped failed -16
[  598.669722] gfs2: not a GFS2 filesystem
[  598.674650] gfs2: fsid=dh: can't read superblock
[  598.686818] binder: BINDER_SET_CONTEXT_MGR already set
[  598.695576] binder: 28295:28307 ioctl 40046207 0 returned -16
[  598.704767] binder_alloc: 28295: binder_alloc_buf, no vma
06:23:45 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  598.711856] binder: 28295:28316 transaction failed 29189/-3, size 24-8 line 2973
[  598.733318] binder: 28295:28323 got transaction to invalid handle
[  598.737628] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  598.742548] binder: 28295:28323 transaction failed 29201/-22, size 0-0 line 2834
06:23:45 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x1, 0x0, {0xffffffffffffffff, 0x3, 0xfffffffffffffffe, 0x0, 0x7f}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x4, @output={0x1000, 0x8344c61684c88b23, {0x7fffffff, 0x7fffffff}, 0x2, 0x3ff}})
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:45 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

[  598.756557] binder: release 28295:28307 transaction 2724 out, still active
[  598.771016] gfs2: fsid=dh: can't read superblock: -22
[  598.794339] binder: unexpected work type, 4, not freed
06:23:45 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000900390f090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:45 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  598.854150] binder: undelivered TRANSACTION_COMPLETE
[  598.890131] binder: undelivered TRANSACTION_ERROR: 29201
[  598.934597] binder: undelivered TRANSACTION_ERROR: 29189
[  598.945531] binder: release 28295:28307 transaction 2724 in, still active
[  598.953459] binder: send failed reply for transaction 2724, target dead
[  598.960967] binder: undelivered TRANSACTION_ERROR: 29189
[  599.012841] cgroup: fork rejected by pids controller in /syz2
06:23:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:23:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sysfs$2(0x2, 0x6, &(0x7f0000000100)=""/20)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3aed409aa3dc96229965d8a1ef963f18a1581640ac2fc1e705792983d5dd24abdbf528881e02d0d304b40f6ac7054619d6f3599e1f6dec955dcd72fe81d54184cd2deb86c0435b93d7b411ce6ffbbb5c2081c2e9a1b614fceb802d3787888560fc424f98cb5e01eb85168f290224d216e046a83bf719699834d284c97c328936c0d859c2be745930c1fe88dd1df7e239cf14044beea7b508fc2e4b24b58f23fe127489d32c7e1dd722fdf45b0a861a79"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})

06:23:46 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900140023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:46 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:46 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x7, 0x73717773, 0x1, 0x40, 0x0, @stepwise={{0x6, 0x6}, {0x8, 0x1}, {0x5, 0x2}}})
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x404081)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x7, 0x3fa, 0x7, 0x100000001, 0x5, 0x200, 0xffffffff, 0x6, 0x0, 0x2, 0x7, 0x8, 0x0, 0xffff, 0x1, 0x400}})
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={0x0, <r4=>0x0, 0x8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={r4, 0x80000, r3})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

06:23:46 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  599.329194] netlink: 'syz-executor4': attribute type 20 has an invalid length.
[  599.347935] binder: 28351:28356 unknown command -1707020998
[  599.359217] binder: 28351:28356 ioctl c0306201 20000140 returned -22
06:23:46 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900050023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:46 executing program 3:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x4400, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000280)={<r1=>0x0, 0x1ff}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r1, 0x3, 0x8, 0xfffffffffffffffd}, 0x10)
r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4})
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000340)=""/4096)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r2, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000000c0)=""/179)

[  599.410205] binder: 28351:28362 transaction failed 29189/-3, size 0-0 line 2973
[  599.486527] binder_alloc: binder_alloc_mmap_handler: 28351 20001000-20004000 already mapped failed -16
[  599.487572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  599.502641] IPv6: NLM_F_CREATE should be set when creating new route
[  599.516833] dns_resolver: Unsupported server list version (0)
06:23:46 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  599.554812] binder: BINDER_SET_CONTEXT_MGR already set
[  599.568538] binder: 28351:28383 unknown command -1707020998
[  599.582250] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  599.599188] gfs2: fsid=dh: Now mounting FS...
06:23:46 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039001d0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  599.618009] gfs2: not a GFS2 filesystem
[  599.629479] gfs2: fsid=dh: can't read superblock
[  599.637879] binder: release 28351:28356 transaction 2731 out, still active
[  599.641436] gfs2: fsid=dh: can't read superblock: -22
[  599.646324] binder: 28351:28362 ioctl 40046207 0 returned -16
06:23:46 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

[  599.665653] binder: unexpected work type, 4, not freed
[  599.717284] binder: undelivered TRANSACTION_COMPLETE
[  599.726806] netlink: 'syz-executor4': attribute type 29 has an invalid length.
[  599.754288] binder: 28351:28383 ioctl c0306201 20000140 returned -22
[  599.771349] dns_resolver: Unsupported server list version (0)
06:23:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x821c0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x21)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000380)={0x3, r3})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x480, 0x0)
syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x7, 0x101000)
r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r4, r5, 0x7, 0x1}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0})
r6 = shmget(0x2, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil)
shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000400)=""/97)

06:23:46 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x4200, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:46 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003960090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  599.818327] binder: undelivered TRANSACTION_ERROR: 29189
[  599.823969] binder: send failed reply for transaction 2731, target dead
[  599.967924] binder: 28402:28405 transaction failed 29189/-3, size 0-0 line 2973
[  600.007919] binder_alloc: binder_alloc_mmap_handler: 28402 20001000-20004000 already mapped failed -16
[  600.060513] binder: BINDER_SET_CONTEXT_MGR already set
[  600.081169] binder: 28402:28407 ioctl 40046207 0 returned -16
[  600.101510] binder: 28402:28405 transaction failed 29189/-3, size 24-8 line 2973
[  600.149240] binder: release 28402:28405 transaction 2736 in, still active
[  600.163981] binder: send failed reply for transaction 2736 to 28402:28405
[  600.191176] binder: undelivered TRANSACTION_COMPLETE
06:23:47 executing program 5:
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:47 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xd4000, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)="4fdb52962dfd3f1d1957e15b3b8733ace26c040e89ebdc73e1cb655c50403a2d64836d2382605fae7a0abf7c3888511e926b3ef86c1ba4df84c093eb53189626f73a73e1d6128a2903ef30df432c181a4b3e154cc55fe7ba29998a1725d5d46afd6aaada1e7919cb0f40394b6f3bc75333eac8bf8022a4ce79a227e30406a31da4586002572bca1486e94841837e9585140652b87c4725ed62fd62a508b36fdf182f123cfff7e154285e1d04", 0xac)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000100)=""/67)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10011, r1, 0x10000)

06:23:47 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:23:47 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039fc090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040000)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x309, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008041}, 0x24000001)
inotify_init1(0x80800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0075406166481b0042064d3a4d1a767c4001f8db2fba8f66ba139ed9f45ad0071f80f3ac56babf4dbbec0d9991efabc6f16415bc5865722c900dde063b306ce4dfd0506d0927"], 0x0, 0x0, 0x0})

06:23:47 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  600.435320] __nla_parse: 2 callbacks suppressed
[  600.480290] binder: 28416:28420 unknown command 1631614208
[  600.491327] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  600.526132] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  600.536486] binder: 28416:28420 ioctl c0306201 20000040 returned -22
06:23:47 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

[  600.578843] binder_alloc: binder_alloc_mmap_handler: 28416 20001000-20004000 already mapped failed -16
[  600.593974] gfs2: fsid=dh: Now mounting FS...
06:23:47 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900030023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  600.632450] gfs2: not a GFS2 filesystem
[  600.637513] binder: BINDER_SET_CONTEXT_MGR already set
[  600.696203] gfs2: fsid=dh: can't read superblock
[  600.726316] binder: 28416:28420 ioctl 40046207 0 returned -16
06:23:47 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = msgget$private(0x0, 0x4)
r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x60a200)
ioctl$RTC_AIE_ON(r3, 0x7001)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r6=>0x0}, &(0x7f0000000100)=0xc)
r7 = getegid()
r8 = gettid()
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r9=>0x0})
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x400, r4, r5, r6, r7, 0x81, 0x401}, 0x6, 0x7, 0x101, 0xd209, 0x7, 0x401, r8, r9})

[  600.785589] gfs2: fsid=dh: can't read superblock: -22
06:23:47 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  600.813146] binder_alloc_new_buf_locked: 3 callbacks suppressed
[  600.813153] binder_alloc: 28416: binder_alloc_buf, no vma
[  600.923213] binder: 28416:28432 unknown command 1631614208
[  600.961443] binder: 28416:28439 transaction failed 29189/-3, size 24-8 line 2973
[  601.000881] binder: release 28416:28420 transaction 2742 out, still active
[  601.010329] binder: 28416:28432 ioctl c0306201 20000040 returned -22
[  601.023637] binder: unexpected work type, 4, not freed
[  601.055953] binder: undelivered TRANSACTION_COMPLETE
[  601.061176] binder: send failed reply for transaction 2742, target dead
[  602.102407] netlink: 'syz-executor4': attribute type 3 has an invalid length.
06:23:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

06:23:49 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440))
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:49 executing program 5:
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:49 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:49 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xd4000, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)="4fdb52962dfd3f1d1957e15b3b8733ace26c040e89ebdc73e1cb655c50403a2d64836d2382605fae7a0abf7c3888511e926b3ef86c1ba4df84c093eb53189626f73a73e1d6128a2903ef30df432c181a4b3e154cc55fe7ba29998a1725d5d46afd6aaada1e7919cb0f40394b6f3bc75333eac8bf8022a4ce79a227e30406a31da4586002572bca1486e94841837e9585140652b87c4725ed62fd62a508b36fdf182f123cfff7e154285e1d04", 0xac)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000100)=""/67)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10011, r1, 0x10000)

06:23:49 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000c0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  602.231601] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  602.240783] gfs2: fsid=dh: Now mounting FS...
[  602.246429] gfs2: not a GFS2 filesystem
[  602.256116] gfs2: fsid=dh: can't read superblock
[  602.295395] gfs2: fsid=dh: can't read superblock: -22
06:23:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:23:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:23:49 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r2=>0x0, 0x3c, "6332c1e8ff3b884333bc0b24aec942ec02f4f81765d8dd32ef55377a304d0fd0ddf7b7f57a204810f082777df7679885469c08a4c991314a363b47e8"}, &(0x7f0000000080)=0x44)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x438c}, &(0x7f0000000100)=0x8)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:49 executing program 5:
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  602.681857] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  602.712326] IPVS: ftp: loaded support on port[0] = 21
[  602.722573] gfs2: fsid=dh: Now mounting FS...
06:23:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

[  602.757331] gfs2: not a GFS2 filesystem
[  602.771295] gfs2: fsid=dh: can't read superblock
[  602.806988] gfs2: fsid=dh: can't read superblock: -22
[  602.827103] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  602.845502] CPU: 0 PID: 28492 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371
[  602.852998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  602.862357] Call Trace:
[  602.864948]  dump_stack+0x244/0x39d
[  602.868582]  ? dump_stack_print_info.cold.1+0x20/0x20
[  602.873765]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  602.878869]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  602.883272]  sysfs_create_dir_ns+0x2a1/0x340
[  602.887692]  ? sysfs_create_mount_point+0xa0/0xa0
[  602.892535]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  602.897296]  kobject_add_internal.cold.11+0x116/0x6af
[  602.902492]  ? kobj_ns_type_registered+0x60/0x60
[  602.907253]  ? kfree_const+0x59/0x70
[  602.910959]  ? rcu_read_lock_sched_held+0x14f/0x180
[  602.915967]  ? kfree+0x1f8/0x230
[  602.919325]  ? kfree_const+0x5e/0x70
[  602.923031]  kobject_init_and_add+0xf4/0x140
[  602.927433]  ? kobject_add_internal+0x4d0/0x4d0
[  602.932101]  ? vsnprintf+0x20d/0x1b60
[  602.935901]  gfs2_sys_fs_add+0x1ff/0x4f0
[  602.939956]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  602.945483]  ? recover_store+0x1a0/0x1a0
[  602.949537]  ? snprintf+0xae/0xe0
[  602.952982]  ? vscnprintf+0x70/0x80
[  602.956729]  ? memcpy+0x45/0x50
[  602.960003]  fill_super+0x89c/0x1a10
[  602.963717]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.969247]  ? vsnprintf+0x20d/0x1b60
[  602.973056]  ? gfs2_online_uevent+0x2b0/0x2b0
[  602.977543]  ? pointer+0x900/0x900
[  602.981078]  ? match_strlcpy+0xcc/0x110
[  602.985043]  ? gfs2_mount_args+0x972/0xb10
[  602.989284]  ? snprintf+0xae/0xe0
[  602.992732]  ? vsprintf+0x40/0x40
[  602.996182]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  603.001191]  ? set_blocksize+0x2c1/0x340
[  603.005256]  gfs2_mount+0x5e6/0x712
[  603.008886]  ? fill_super+0x1a10/0x1a10
[  603.012870]  ? alloc_pages_current+0x17b/0x350
[  603.017456]  mount_fs+0xae/0x31d
[  603.020822]  vfs_kern_mount.part.35+0xdc/0x4f0
[  603.025398]  ? may_umount+0xb0/0xb0
[  603.029020]  ? _raw_read_unlock+0x2c/0x50
[  603.033156]  ? __get_fs_type+0x97/0xc0
[  603.037038]  do_mount+0x581/0x31f0
[  603.040575]  ? check_preemption_disabled+0x48/0x280
[  603.045596]  ? copy_mount_string+0x40/0x40
[  603.049831]  ? copy_mount_options+0x5f/0x430
[  603.054233]  ? rcu_read_lock_sched_held+0x14f/0x180
[  603.059246]  ? kmem_cache_alloc_trace+0x353/0x750
[  603.064086]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  603.069622]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  603.075150]  ? copy_mount_options+0x315/0x430
[  603.079649]  ksys_mount+0x12d/0x140
[  603.083273]  __x64_sys_mount+0xbe/0x150
[  603.087245]  do_syscall_64+0x1b9/0x820
[  603.091210]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  603.096570]  ? syscall_return_slowpath+0x5e0/0x5e0
[  603.101512]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  603.106368]  ? trace_hardirqs_on_caller+0x310/0x310
[  603.111475]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  603.116498]  ? prepare_exit_to_usermode+0x291/0x3b0
[  603.121524]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  603.126362]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  603.131556] RIP: 0033:0x45a0ea
[  603.134743] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
06:23:50 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  603.153637] RSP: 002b:00007feaa9542a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  603.161341] RAX: ffffffffffffffda RBX: 00007feaa9542b30 RCX: 000000000045a0ea
[  603.168607] RDX: 00007feaa9542ad0 RSI: 0000000020000380 RDI: 00007feaa9542af0
[  603.175868] RBP: 0000000020000380 R08: 00007feaa9542b30 R09: 00007feaa9542ad0
[  603.183140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  603.190399] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  603.493692] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  603.506336] gfs2: fsid=dh: error -17 adding sysfs files
[  605.136127] device bridge_slave_1 left promiscuous mode
[  605.142742] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.152674] device bridge_slave_0 left promiscuous mode
[  605.158375] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.193514] bond0 (unregistering): Released all slaves
[  607.204167] team0 (unregistering): Port device team_slave_1 removed
[  607.216327] team0 (unregistering): Port device team_slave_0 removed
[  607.228260] ÿ (unregistering): Releasing backup interface bond_slave_1
[  607.239770] ÿ (unregistering): Releasing backup interface bond_slave_0
[  607.270821] ÿ (unregistering): Released all slaves
[  607.291043] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.297854] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.305166] device bridge_slave_0 entered promiscuous mode
[  607.346520] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.353230] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.361125] device bridge_slave_1 entered promiscuous mode
[  607.425671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  607.513680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  607.753914] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  607.822867] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  608.097810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  608.106917] team0: Port device team_slave_0 added
[  608.176952] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  608.185241] team0: Port device team_slave_1 added
[  608.250747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  608.322559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  608.329845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  608.341214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  608.385935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  608.393261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  608.408686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  608.461690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  608.469118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  608.479100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  608.830896] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.837401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.844092] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.850492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.857976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  609.335511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  609.852937] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.949953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  610.046870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  610.053037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  610.061162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  610.158518] 8021q: adding VLAN 0 to HW filter on device team0
06:23:57 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:57 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:23:57 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:57 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000e0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:57 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  610.733018] dns_resolver_preparse: 6 callbacks suppressed
[  610.733027] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:57 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

06:23:57 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:57 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900060023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  610.844440] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  610.912839] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  610.925574] gfs2: fsid=dh: Now mounting FS...
[  610.941400] gfs2: not a GFS2 filesystem
[  610.948295] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  610.968791] CPU: 0 PID: 28781 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #371
[  610.976224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  610.980180] gfs2: fsid=dh: can't read superblock
[  610.985604] Call Trace:
[  610.985635]  dump_stack+0x244/0x39d
[  610.985657]  ? dump_stack_print_info.cold.1+0x20/0x20
[  610.985677]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  610.985697]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  610.985717]  sysfs_create_dir_ns+0x2a1/0x340
[  611.003341] gfs2: fsid=dh: can't read superblock: -22
[  611.007014]  ? sysfs_create_mount_point+0xa0/0xa0
[  611.007033]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  611.007063]  kobject_add_internal.cold.11+0x116/0x6af
[  611.007084]  ? kobj_ns_type_registered+0x60/0x60
[  611.040691]  ? kfree_const+0x59/0x70
[  611.044420]  ? rcu_read_lock_sched_held+0x14f/0x180
[  611.049446]  ? kfree+0x1f8/0x230
[  611.052828]  ? kfree_const+0x5e/0x70
[  611.056553]  kobject_init_and_add+0xf4/0x140
[  611.060968]  ? kobject_add_internal+0x4d0/0x4d0
[  611.060990]  ? vsnprintf+0x20d/0x1b60
[  611.061024]  gfs2_sys_fs_add+0x1ff/0x4f0
[  611.069468]  ? recover_store+0x1a0/0x1a0
[  611.069490]  ? snprintf+0xae/0xe0
[  611.069506]  ? vscnprintf+0x70/0x80
[  611.069532]  ? memcpy+0x45/0x50
[  611.077739]  fill_super+0x89c/0x1a10
[  611.077762]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  611.077776]  ? vsnprintf+0x20d/0x1b60
[  611.077797]  ? gfs2_online_uevent+0x2b0/0x2b0
[  611.077810]  ? pointer+0x900/0x900
[  611.077828]  ? match_strlcpy+0xcc/0x110
[  611.084899]  ? gfs2_mount_args+0x972/0xb10
[  611.084920]  ? snprintf+0xae/0xe0
[  611.084936]  ? vsprintf+0x40/0x40
[  611.084956]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  611.097541]  ? set_blocksize+0x2c1/0x340
[  611.097571]  gfs2_mount+0x5e6/0x712
[  611.097589]  ? fill_super+0x1a10/0x1a10
[  611.097606]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[  611.097642]  ? alloc_pages_current+0x17b/0x350
[  611.106016]  mount_fs+0xae/0x31d
[  611.106041]  vfs_kern_mount.part.35+0xdc/0x4f0
[  611.106059]  ? may_umount+0xb0/0xb0
[  611.106074]  ? _raw_read_unlock+0x2c/0x50
[  611.106093]  ? __get_fs_type+0x97/0xc0
[  611.113598]  do_mount+0x581/0x31f0
[  611.113618]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  611.113633]  ? trace_hardirqs_on+0x310/0x310
[  611.113654]  ? copy_mount_string+0x40/0x40
[  611.187711]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  611.192496]  ? retint_kernel+0x2d/0x2d
[  611.196411]  ? copy_mount_options+0x25c/0x430
[  611.200903]  ? copy_mount_options+0x1de/0x430
[  611.205396]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  611.210925]  ? copy_mount_options+0x315/0x430
[  611.215533]  ksys_mount+0x12d/0x140
[  611.219175]  __x64_sys_mount+0xbe/0x150
[  611.223162]  ? do_syscall_64+0xca/0x820
[  611.227129]  do_syscall_64+0x1b9/0x820
[  611.231010]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  611.236380]  ? syscall_return_slowpath+0x5e0/0x5e0
[  611.241325]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  611.246163]  ? trace_hardirqs_on_caller+0x310/0x310
[  611.251172]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  611.256181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  611.261721]  ? prepare_exit_to_usermode+0x291/0x3b0
[  611.266739]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  611.271603]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  611.276790] RIP: 0033:0x45a0ea
[  611.279978] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  611.298901] RSP: 002b:00007fdbfe6dba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  611.306608] RAX: ffffffffffffffda RBX: 00007fdbfe6dbb30 RCX: 000000000045a0ea
06:23:58 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x20001, 0x0)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

[  611.313939] RDX: 00007fdbfe6dbad0 RSI: 0000000020000380 RDI: 00007fdbfe6dbaf0
[  611.321201] RBP: 0000000020000380 R08: 00007fdbfe6dbb30 R09: 00007fdbfe6dbad0
[  611.328475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  611.335742] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  611.350886] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  611.352948] netlink: 'syz-executor4': attribute type 6 has an invalid length.
[  611.367086] gfs2: fsid=dh: error -17 adding sysfs files
06:23:58 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:58 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  611.436474] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:58 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
pipe2$9p(&(0x7f0000000000), 0x800)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:58 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900120023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

06:23:58 executing program 1:
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109)
dup2(r0, r1)
execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r2, r3, 0x1a, &(0x7f0000000580))

06:23:58 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003905090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  611.652942] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  611.666629] gfs2: fsid=dh: Now mounting FS...
[  611.672334] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:23:58 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

06:23:58 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1d, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  611.708813] gfs2: not a GFS2 filesystem
[  611.720111] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  611.738990] gfs2: fsid=dh: can't read superblock
[  611.745538] gfs2: fsid=dh: can't read superblock: -22
06:23:58 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900110023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:58 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+30000}, {0x77359400}})
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x200)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x52, [], 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/82}, &(0x7f00000002c0)=0x78)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

[  611.873194] dns_resolver: Unsupported server list version (0)
06:23:58 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

06:23:58 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039ffe00023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:58 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182)
r3 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x400, 0x43f, 0x1f})
sendfile(r2, r2, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x60)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)
sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x3}, 0x1f}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x8004032, 0xffffffffffffffff, 0x0)
iopl(0x1f80000000000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14)

[  612.088135] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
06:23:59 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

06:23:59 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x300, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {}]})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/4, 0x4}], 0x3, &(0x7f0000000440)=""/60, 0x3c}, 0x2000)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r1, 0x0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000004c0)={<r3=>0x0, 0x3f}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={r3, 0x4, 0x2, 0x8, 0x2, 0x6}, 0x14)

[  612.151754] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:23:59 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:59 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000900390b090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  612.228214] dns_resolver: Unsupported server list version (0)
[  612.256024] gfs2: fsid=dh: Now mounting FS...
[  612.272157] gfs2: not a GFS2 filesystem
[  612.306042] gfs2: fsid=dh: can't read superblock
06:23:59 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  612.339185] gfs2: fsid=dh: can't read superblock: -22
06:23:59 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

[  612.403524] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
06:23:59 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:23:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:23:59 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003911090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:23:59 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r3=>0x0, 0x6}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x9, 0x81, "3179633ad24f16bb177de17e57f548a97ce708c200601c389bd78b29683dcf34db2b5e60b27d5956da042646e4356590a7dae94ac3ae2baa4bcc705875b5831781e79c555e58d6ef819b914cc1ffd203225eab4537706d2d715da6ba4cb82a00cde6c35ca14a01d9027d5f5b2edd8b3ff14fad9976b713a4211a746fb740bbfd25"}, 0x89)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:23:59 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

[  612.638122] print_req_error: I/O error, dev loop3, sector 768
[  612.693186] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  612.762478] print_req_error: I/O error, dev loop3, sector 0
[  612.769022] Buffer I/O error on dev loop3, logical block 0, lost async page write
[  612.779395] print_req_error: I/O error, dev loop3, sector 8
[  612.785159] Buffer I/O error on dev loop3, logical block 1, lost async page write
[  612.793231] print_req_error: I/O error, dev loop3, sector 16
[  612.799172] Buffer I/O error on dev loop3, logical block 2, lost async page write
[  612.806952] print_req_error: I/O error, dev loop3, sector 24
[  612.813166] Buffer I/O error on dev loop3, logical block 3, lost async page write
[  612.821177] print_req_error: I/O error, dev loop3, sector 32
[  612.827331] Buffer I/O error on dev loop3, logical block 4, lost async page write
[  612.835336] print_req_error: I/O error, dev loop3, sector 40
[  612.841504] Buffer I/O error on dev loop3, logical block 5, lost async page write
[  612.849558] print_req_error: I/O error, dev loop3, sector 48
[  612.855544] Buffer I/O error on dev loop3, logical block 6, lost async page write
[  612.855624] print_req_error: I/O error, dev loop3, sector 56
[  612.869529] Buffer I/O error on dev loop3, logical block 7, lost async page write
[  612.870219] print_req_error: I/O error, dev loop3, sector 64
[  612.870234] Buffer I/O error on dev loop3, logical block 8, lost async page write
[  612.870270] Buffer I/O error on dev loop3, logical block 9, lost async page write
[  612.923124] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  612.923135] gfs2: fsid=dh: Now mounting FS...
[  612.925934] gfs2: not a GFS2 filesystem
[  612.925944] gfs2: fsid=dh: can't read superblock
[  612.925954] gfs2: fsid=dh: can't read superblock: -22
06:24:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

06:24:00 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:00 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900200023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:00 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:24:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:00 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182)
r3 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x400, 0x43f, 0x1f})
sendfile(r2, r2, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x60)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)
sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x3}, 0x1f}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x8004032, 0xffffffffffffffff, 0x0)
iopl(0x1f80000000000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14)

06:24:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:24:00 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:00 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003913090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  613.248047] Invalid option length (369) for dns_resolver key
[  613.276390] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:00 executing program 3:
r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x1, 0x80)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000004c0)=0x40, 0x4)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r1, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xb4, 0x1, 0x6, "a2a665336939445277ac553916b2dd62", "a1779ee29261100537369c08c293f96191979bfb1dcca3f30a700431a7530f731321b6561b032dc1a7bec969460e40992dffaf5672532cafee2ad852046c0960df7acaaba0257ff80485690ac99446e8f1b2ab65ca187ff4c6976117869da2150ce5490adec6f735b9e55ef609a3bf1d3f519faaea11bf7a599ba4e4632d4b8cae085be77a8de6e75222536ad49ae797a6a167e41ab5b121dfc128e4789a1d"}, 0xb4, 0x3)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="57e3029c1ad5858892fb2bb79aa1baae00275003f6c0135160", 0x19}, {&(0x7f0000000040)='\v\\.', 0x3}, {&(0x7f0000000080)="2411af7197bc10e12eeb48f372d4501f26f60f1e7e3ee4d576dce43243793dbda62be965f21c144532d8ed7b5fe1508d00349a06b49f027647387e39f6e44d14f9a48cdf197a047de343019fb20f236b0b5874027da8c93dd4000be0a863072102ac33943c4d130c7076464fd3909dceff11d63bdd7908c511e1659f4e391322dea96af9a62692d6b3f63876296173ce3865a658bcd3a366099d83a8aeb5b5fdf0ab7644f5605b02144f4ae5d54286b53b7396cb8fa1fc6c7be143182b2d968fc660b593817fbec2bc940d5da6006ecd62fef8ee1f03270bbd9d", 0xda}, {&(0x7f0000000180)="4196b31bfe6272f4260ade85ab9ed02293a3964d616198e6b729f15ec4603ccce8b1a4425d07bd68728ea594d52a8233fdb303dc0534cfa6126359498afa3b36ef29b3fa979f8ab81b90b0a70cccd4a96a962019e7b659ecaa418f7ca1d0b37c4ca80f50043bc7b890f8197faf6ef0e8f82c2cd41404cec0ad991ee8dffee075b1ed0a8ba7", 0x85}, {&(0x7f0000000240)="ec871fdb6a3ae054d5d8e8d52c5768f49e44ddfcaa6982856b056d6337f022c968fe62349e2e2ed8b69c41b51eb345793f22224b3527b1da6333c3e4f37c23393a2a99aeb2196ab171b5151a29464ed01fc998d1492a764436f4040f924d9bf2d58632d10b891d0175f144bb71ab8104d9f57345d316f4fafc5ec7a4527f947f6cc527ddc1c0c29aca7907204970bf19ae73c208867884947f35ed982664def741e6067c9db5afe9665e69b7e67f2231d829ce6192fba6f665073b4b6457a82e2d58147973f35e0bc382e330ee1cdf2c58165d24c2d7cdee014d99bc33bc3ce17fa66c4717428b617d73f91346c44f19", 0xf0}, {&(0x7f0000000340)="1c8b0c9c79fcd2503e84859c8bd18ec80930d270b5c6d013009bc6dc73d4c2fefcc09d7e5a91927e13be924a8508e476b6ea25c963d5f805a2fe3ea5c1cbdf469bb2d7241325cb95e542fecdbf7dbc05654dd5dac1fdcf3f1b58f6facb0277ff99ba93c2ceb992b7c24dbd829be32b3a0f1898fd06e105f315e5cd2a15fa9b971337abd7561597d0ed266a52a897b0a86a7e4a", 0x93}], 0x6)
splice(r0, &(0x7f0000000640), r0, &(0x7f0000000680), 0x5, 0x2)
shutdown(r0, 0x1)

[  613.320237] gfs2: fsid=dh: Now mounting FS...
06:24:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

[  613.353737] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  613.375702] gfs2: not a GFS2 filesystem
[  613.379750] gfs2: fsid=dh: can't read superblock
06:24:00 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003906090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:00 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  613.423731] gfs2: fsid=dh: can't read superblock: -22
[  613.440350] Invalid option length (369) for dns_resolver key
06:24:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:24:00 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de4"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  613.563746] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  613.580771] Invalid option length (369) for dns_resolver key
06:24:00 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003907090023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  613.764290] Invalid option length (369) for dns_resolver key
[  613.813880] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'.
[  613.889367] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  613.933524] gfs2: fsid=dh: Now mounting FS...
[  613.980602] gfs2: not a GFS2 filesystem
[  613.985962] gfs2: fsid=dh: can't read superblock
[  614.010488] gfs2: fsid=dh: can't read superblock: -22
06:24:00 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182)
r3 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x400, 0x43f, 0x1f})
sendfile(r2, r2, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x60)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)
sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x3}, 0x1f}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x8004032, 0xffffffffffffffff, 0x0)
iopl(0x1f80000000000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14)

06:24:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

06:24:00 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de4"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:00 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000b0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:00 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10014, r1, 0x0)

06:24:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:01 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900070023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  614.143988] Invalid option length (369) for dns_resolver key
06:24:01 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x2)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r2, 0x200000000000000)

06:24:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

[  614.290617] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:01 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:01 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900020023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  614.368220] gfs2: fsid=dh: Now mounting FS...
[  614.406360] gfs2: not a GFS2 filesystem
[  614.433220] Invalid option length (369) for dns_resolver key
[  614.445764] gfs2: fsid=dh: can't read superblock
[  614.468736] gfs2: fsid=dh: can't read superblock: -22
06:24:01 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10)

06:24:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

06:24:01 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xb02c, 0x40180)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:24:01 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900080023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:01 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

[  614.702517] Invalid option length (369) for dns_resolver key
06:24:01 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900140023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:01 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x10000, 0x2}]}, 0xc, 0x1)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'bcsf0\x00'}}, 0x1e)

06:24:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x324}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x2}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x42, 0x105}, 0x14}}, 0x0)

06:24:01 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  614.841554] Invalid option length (369) for dns_resolver key
06:24:01 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

[  614.899834] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  614.912253] netlink: 'syz-executor4': attribute type 20 has an invalid length.
[  614.936145] gfs2: fsid=dh: Now mounting FS...
06:24:01 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900e0ff23000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  614.978949] gfs2: not a GFS2 filesystem
06:24:01 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:01 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_security(0x11, r2, &(0x7f0000000080)=""/144, 0x90)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  615.011715] gfs2: fsid=dh: can't read superblock
[  615.028045] gfs2: fsid=dh: can't read superblock: -22
[  615.046268] Invalid option length (369) for dns_resolver key
[  615.181043] Invalid option length (369) for dns_resolver key
06:24:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

06:24:02 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000c0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:02 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:02 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x220000, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0200020003000000"], &(0x7f0000000080)=0x8)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:24:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099c"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:02 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900030023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  615.387177] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  615.421902] gfs2: fsid=dh: Now mounting FS...
06:24:02 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  615.448521] gfs2: not a GFS2 filesystem
[  615.458762] gfs2: fsid=dh: can't read superblock
[  615.468422] gfs2: fsid=dh: can't read superblock: -22
06:24:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd25"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  615.545543] netlink: 'syz-executor4': attribute type 3 has an invalid length.
06:24:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:02 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040), &(0x7f0000000080))
r3 = semget$private(0x0, 0x0, 0x588535b87cb7ba56)
semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f00000000c0)=""/64)
ioprio_get$uid(0x0, r2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)

06:24:02 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:02 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900060023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd2520"], 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  615.744461] netlink: 'syz-executor4': attribute type 6 has an invalid length.
06:24:02 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:02 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000d0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:02 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
io_setup(0x13e, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0)
getpeername(r3, &(0x7f0000000580)=@xdp, &(0x7f0000000200)=0x80)
r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x3, 0x10000)
r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x80082, 0x0)
r6 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x4, 0x800)
io_submit(r2, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000040)="faac57c834bd6bf7474716d6df25a0d0da8e4b06946ada0ba2906525c7d7931eb682aebe02194482a43d1bd8858a0eac6a6cbfdbf814dfd1858dabc5", 0x3c, 0x2, 0x0, 0x0, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000100)="5d368cbbe274a942c035c28c276da91c2d500441135be8a84e3be62bd58a803ef6580050666efeb0ac570bd8ab1cd02d61e08348d04f0126cd83b8faf93326a2ade884fdf3b58277fef8a02aceb0c694678b8d0a41fc2bd6fb384077daca42e5019c6004d908953486a4dbe1f2db3a31686cf23c36d47b", 0x77, 0x3, 0x0, 0x2, r4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb, 0x84ad, r1, &(0x7f0000000280)="7689818953f135a59997b2c75c6938093955aaf62922ab011bc2db6af78f9697fe854dcfebb3e7548f931094e5896faad4165b414add09df57901adb3251c902d9fdee8f1b35fee9e0b408b2941ef9b73f8f5f2eba0cba8d188436e035296f045f66eb3f3c7f2b9571709ab4ac8738f5f3332fdfc810afcbe011d03bebfe0c714ad049bb52a7438972488b1d64ad3f3df1a5a2c86c575a10546233c55e1d952334dd2954037ecb7562652c0142a620bba2", 0xb1, 0x6, 0x0, 0x3, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xf, 0xfffffffffffff000, r0, &(0x7f00000003c0)="33342ddb1e65cf9516f1821b8a3a852cd2dd78961bdc670978842117c9c5b6bedc0ca134f38f86ccaa3cb657e18d0da98d0e35f0d62e51aa2ebf799623390a3bf80d9d1d0be0b1028607ff92e05fbbc12902977270493906273d111008991211c74a4fd761f20930efa3a9d77cda22ca69c3eb579817bae6d14a5d46e1dc780ed3d19b2974fb0daff9130cd158fe18783f7543f5276072813c639296b5ab3295c20c1f6de4cfe8ed943f7e8892b495e78e45112f8e94c1e4cbf9d41a4c0b2d8c1c9c7ccfdce18b6d9a64473912fd51bab1a038f0ad3f39ff200b09257a", 0xdd, 0x40, 0x0, 0x0, r6}])
dup(r4)

06:24:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:24:02 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  615.993763] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:02 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  616.043308] gfs2: fsid=dh: Now mounting FS...
[  616.106264] gfs2: not a GFS2 filesystem
[  616.127934] gfs2: fsid=dh: can't read superblock
[  616.128798] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  616.166043] gfs2: fsid=dh: can't read superblock: -22
06:24:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:24:03 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900110023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:03 executing program 2:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:03 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x581000, 0x0)
getdents64(r2, &(0x7f0000000040)=""/195, 0xc3)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0)

06:24:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

[  616.447832] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:03 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0)
r2 = getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
kcmp(r2, r3, 0x4, r1, r1)

06:24:03 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900480023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:03 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:03 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

[  616.683923] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:03 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900040023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
r2 = dup3(r1, r0, 0x0)
ioctl$sock_bt(r2, 0x541b, &(0x7f0000000000))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)

06:24:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:24:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:03 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  616.871290] netlink: 'syz-executor4': attribute type 4 has an invalid length.
[  616.905033] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:03 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900050023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:04 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:04 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

[  617.047394] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  617.070098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:24:04 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000a0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:04 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:04 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  617.246036] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  617.384114] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:04 executing program 3:
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
creat(&(0x7f00000001c0)='./file1\x00', 0x1000000000006a)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109)
dup2(r0, r1)
execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r2, r3, 0x1a, &(0x7f0000000580))

06:24:04 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:24:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:04 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900120023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:04 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:04 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:04 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:04 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

06:24:04 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039001d0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:04 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:04 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000180)="0a5c2d0240316285717070")

[  617.897113] netlink: 'syz-executor4': attribute type 29 has an invalid length.
06:24:05 executing program 3:

06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

06:24:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900100023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:05 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)="0a5c2d0240316285717070")

06:24:05 executing program 2:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

[  618.198301] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
[  618.206905] netlink: 'syz-executor4': attribute type 16 has an invalid length.
06:24:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000b0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:05 executing program 3:

06:24:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  618.317735] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:24:05 executing program 2:

06:24:05 executing program 3:

06:24:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000e0023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  618.540472] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  618.567135] gfs2: fsid=dh: Now mounting FS...
06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  618.593660] gfs2: not a GFS2 filesystem
06:24:05 executing program 2:

[  618.616245] gfs2: fsid=dh: can't read superblock
[  618.624922] gfs2: fsid=dh: can't read superblock: -22
06:24:05 executing program 3:

06:24:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900e00023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:24:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:05 executing program 3:

06:24:05 executing program 2:

06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

06:24:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:05 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090035000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:05 executing program 3:

06:24:05 executing program 2:

06:24:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

[  619.011922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:24:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090f23000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:06 executing program 3:

[  619.154060] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:06 executing program 2:

06:24:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

[  619.229258] gfs2: fsid=dh: Now mounting FS...
06:24:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090823000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  619.305328] gfs2: not a GFS2 filesystem
[  619.309363] gfs2: fsid=dh: can't read superblock
[  619.314135] gfs2: fsid=dh: can't read superblock: -22
06:24:06 executing program 2:

06:24:06 executing program 3:

06:24:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

06:24:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090b23000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:06 executing program 3:

06:24:06 executing program 2:

06:24:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090923000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

[  619.699140] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:06 executing program 3:

06:24:06 executing program 2:

[  619.791251] gfs2: fsid=dh: Now mounting FS...
06:24:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:06 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getgroups(0x2, &(0x7f0000000180)=[0x0, 0xffffffffffffffff])
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x2008200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
fallocate(r3, 0x8, 0x0, 0x10000)
write$FUSE_LSEEK(r1, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @dev}}}, {{@in=@local}, 0x0, @in=@local}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f00000003c0))
fchown(0xffffffffffffffff, 0x0, 0x0)

06:24:06 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900091323000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  619.839456] gfs2: not a GFS2 filesystem
[  619.843508] gfs2: fsid=dh: can't read superblock
[  619.876676] gfs2: fsid=dh: can't read superblock: -22
06:24:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

06:24:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

06:24:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090423000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000f80)=""/197, 0xc5}], 0x1, &(0x7f00000011c0)=""/40, 0x28, 0x7fffffff}}], 0x1, 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100))
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

06:24:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090623000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

06:24:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  620.399908] *** Guest State ***
[  620.414676] gfs2: not a GFS2 filesystem
[  620.415748] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7
06:24:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x800000000000, &(0x7f0000000480)=""/146, &(0x7f0000000540)=0x92)
r1 = socket$netlink(0x10, 0x3, 0x100000000c)
openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000380))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@multicast2, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d80)={{{@in, @in=@local}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003740))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f00000003c0))
getgroups(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000040)={0x8000000000000002}, 0x8)
madvise(&(0x7f0000953000/0x2000)=nil, 0x2000, 0x1d)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000003a80)=0x8d)
sendmsg$netlink(r1, &(0x7f0000003b40)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000003700)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="100000df2543bc9ac94c8dcb2ba16745155beafb53641e13b60d73f6e78b290c6e33c69f5927271aacb2dafb32a1eaa6ec49e68d8992809e5a8dbbda30dd20e888aa5d200c8142e56e0cb1bdcc7c1abfe571ea98460bede848199dc45669e96aeadab5d379bc5c205f78db749c0a2a93353efe5db2e0093c70625da38259bd20fefde729216ff92ec95cc0a6e5bcce6ff799ce1bf1cfd0be5c3e78e45a215ab7ce975b436f8707fb87d5e331aeb9bd40edbf6adc7fbdc32ff1802b1a6d9fa20ce02245c112e60bd81bfdf5450d424f2be6c0df89837cc5b0b9e99a8f686a6e2917889be0a2"], 0x1}], 0x1}, 0xdbcf8ce4a45402e6)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000efd000)=0x1f)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000140)={0x7}, 0x7)
r2 = syz_open_pts(r0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000007c0)=ANY=[])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005380), &(0x7f00000053c0)=0xc)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0xd8)
mremap(&(0x7f0000953000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000950000/0x4000)=nil)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x0)

[  620.445867] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  620.464521] CR3 = 0x0000000000000000
[  620.473470] RSP = 0x0000000000000000  RIP = 0x0000000000008000
06:24:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  620.518132] RFLAGS=0x00000002         DR7 = 0x0000000000000400
06:24:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

[  620.577509] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
06:24:07 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090048000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  620.627097] CS:   sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000
[  620.652700] DS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[  620.667531] gfs2: not a GFS2 filesystem
[  620.715497] SS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[  620.769993] ES:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[  620.791013] FS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[  620.802116] GS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[  620.811088] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  620.820511] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  620.831229] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  620.839834] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  620.848178] EFER =     0x0000000000006000  PAT = 0x0007040600070406
[  620.854608] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  620.854621] Interruptibility = 00000008  ActivityState = 00000000
[  620.854626] *** Host State ***
[  620.854639] RIP = 0xffffffff812047de  RSP = 0xffff888181e1f390
[  620.854667] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  620.854680] FSBase=00007f438f88d700 GSBase=ffff8881dae00000 TRBase=fffffe0000033000
[  620.854693] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[  620.854709] CR0=0000000080050033 CR3=0000000162a29000 CR4=00000000001426f0
[  620.854725] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360
[  620.854737] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  620.854745] *** Control State ***
[  620.868864] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  620.929411] EntryControls=0000d1ff ExitControls=002fefff
[  620.934855] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  620.941854] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  620.948872] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  620.955547]         reason=80000021 qualification=0000000000000000
[  620.961880] IDTVectoring: info=00000000 errcode=00000000
[  620.967388] TSC Offset = 0xfffffeb1249a585c
[  620.971726] EPT pointer = 0x0000000162a2a01e
[  620.981372] *** Guest State ***
[  620.986057] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7
[  620.995570] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871
[  621.004469] CR3 = 0x0000000000000000
[  621.008278] RSP = 0x0000000000000000  RIP = 0x0000000000008000
[  621.014260] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  621.020331] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  621.027162] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035153] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035173] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035189] ES:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035208] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035226] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.035317] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  621.083598] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.091640] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  621.099688] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  621.107750] EFER =     0x0000000000006500  PAT = 0x0007040600070406
[  621.114321] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  621.121820] Interruptibility = 00000008  ActivityState = 00000000
[  621.128214] *** Host State ***
[  621.131436] RIP = 0xffffffff812047de  RSP = 0xffff88817b3d7390
[  621.137494] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  621.143908] FSBase=00007f438f86c700 GSBase=ffff8881dae00000 TRBase=fffffe0000033000
[  621.151777] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[  621.157718] CR0=0000000080050033 CR3=0000000162a29000 CR4=00000000001426f0
[  621.164741] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360
[  621.171478] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  621.177569] *** Control State ***
[  621.181044] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  621.187939] EntryControls=0000d3ff ExitControls=002fefff
[  621.193422] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  621.200432] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  621.207141] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001
[  621.213724]         reason=80000021 qualification=0000000000000000
06:24:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x20, 0x20, 0xa3bc010931239d7f}, 0x20}}, 0x0)

06:24:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

06:24:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090523000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

[  621.220112] IDTVectoring: info=00000000 errcode=00000000
[  621.225602] TSC Offset = 0xfffffeb1249a585c
[  621.229921] EPT pointer = 0x0000000162a2a01e
[  621.289557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'.
06:24:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

06:24:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x20, 0x20, 0xa3bc010931239d7f}, 0x20}}, 0x0)

[  621.356220] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  621.389332] gfs2: fsid=dh: Now mounting FS...
[  621.401755] gfs2: not a GFS2 filesystem
06:24:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090223000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  621.406521] gfs2: fsid=dh: can't read superblock
[  621.425954] gfs2: fsid=dh: can't read superblock: -22
[  621.444279] gfs2: not a GFS2 filesystem
[  621.483769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'.
06:24:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:24:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090a23000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:08 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900050023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090007000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:08 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

[  621.811697] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:08 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900091023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  621.853424] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  621.868588] gfs2: fsid=dh: Now mounting FS...
[  621.891860] gfs2: not a GFS2 filesystem
[  621.898025] gfs2: fsid=dh: can't read superblock
[  621.953956] gfs2: fsid=dh: can't read superblock: -22
[  621.971415] CPU: 0 PID: 29662 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371
[  621.978837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  621.988203] Call Trace:
[  621.990831]  dump_stack+0x244/0x39d
[  621.994487]  ? dump_stack_print_info.cold.1+0x20/0x20
[  621.999709]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  622.004848]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  622.009285]  sysfs_create_dir_ns+0x2a1/0x340
[  622.013710]  ? sysfs_create_mount_point+0xa0/0xa0
[  622.018578]  ? write_comp_data+0x70/0x70
[  622.022664]  kobject_add_internal.cold.11+0x116/0x6af
[  622.027870]  ? kobj_ns_type_registered+0x60/0x60
[  622.027891]  ? kfree_const+0x59/0x70
[  622.027910]  ? rcu_read_lock_sched_held+0x14f/0x180
[  622.027924]  ? kfree+0x1f8/0x230
[  622.027942]  ? kfree_const+0x5e/0x70
[  622.036397]  kobject_init_and_add+0xf4/0x140
[  622.036414]  ? kobject_add_internal+0x4d0/0x4d0
[  622.036436]  ? vsnprintf+0x20d/0x1b60
[  622.036463]  gfs2_sys_fs_add+0x1ff/0x4f0
[  622.036479]  ? recover_store+0x1a0/0x1a0
[  622.036496]  ? snprintf+0xae/0xe0
[  622.036511]  ? vscnprintf+0x70/0x80
[  622.036532]  ? memcpy+0x45/0x50
[  622.044894]  fill_super+0x89c/0x1a10
[  622.044916]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  622.044933]  ? vsnprintf+0x20d/0x1b60
[  622.044958]  ? gfs2_online_uevent+0x2b0/0x2b0
[  622.053077]  ? pointer+0x900/0x900
[  622.053101]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  622.053124]  ? snprintf+0xae/0xe0
[  622.053139]  ? vsprintf+0x40/0x40
[  622.053158]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  622.065663]  ? set_blocksize+0x2c1/0x340
[  622.065689]  gfs2_mount+0x5e6/0x712
[  622.065710]  ? fill_super+0x1a10/0x1a10
[  622.065753]  ? alloc_pages_current+0x17b/0x350
[  622.065774]  mount_fs+0xae/0x31d
[  622.065807]  vfs_kern_mount.part.35+0xdc/0x4f0
[  622.073306]  ? may_umount+0xb0/0xb0
[  622.073334]  do_mount+0x581/0x31f0
[  622.073353]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  622.073367]  ? retint_kernel+0x1b/0x2d
[  622.073390]  ? copy_mount_string+0x40/0x40
[  622.080277]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  622.080301]  ? retint_kernel+0x2d/0x2d
[  622.080329]  ? copy_mount_options+0x239/0x430
[  622.080344]  ? copy_mount_options+0x23f/0x430
[  622.080365]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  622.186237]  ? copy_mount_options+0x315/0x430
[  622.190735]  ksys_mount+0x12d/0x140
[  622.194387]  __x64_sys_mount+0xbe/0x150
[  622.198377]  ? do_syscall_64+0xca/0x820
[  622.202361]  do_syscall_64+0x1b9/0x820
[  622.206255]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  622.211633]  ? syscall_return_slowpath+0x5e0/0x5e0
[  622.216567]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  622.221410]  ? trace_hardirqs_on_caller+0x310/0x310
[  622.226430]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  622.231536]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  622.237074]  ? prepare_exit_to_usermode+0x291/0x3b0
[  622.242090]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  622.246968]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  622.252179] RIP: 0033:0x45a0ea
[  622.255627] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  622.274529] RSP: 002b:00007feaa9542a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  622.282242] RAX: ffffffffffffffda RBX: 00007feaa9542b30 RCX: 000000000045a0ea
[  622.289514] RDX: 00007feaa9542ad0 RSI: 0000000020000380 RDI: 00007feaa9542af0
[  622.296889] RBP: 0000000020000380 R08: 00007feaa9542b30 R09: 00007feaa9542ad0
06:24:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:24:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  622.304154] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  622.311418] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  622.321302] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  622.357835] gfs2: fsid=dh: error -17 adding sysfs files
06:24:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090723000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  622.521478] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  622.531001] gfs2: fsid=dh: Now mounting FS...
[  622.590819] gfs2: not a GFS2 filesystem
[  622.623337] gfs2: fsid=dh: can't read superblock
06:24:09 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900091223000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  622.645485] gfs2: fsid=dh: can't read superblock: -22
06:24:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, 0x0, 0x0)

06:24:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

[  622.791533] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  622.811729] CPU: 1 PID: 29708 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371
[  622.819170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  622.828543] Call Trace:
[  622.828573]  dump_stack+0x244/0x39d
[  622.828592]  ? dump_stack_print_info.cold.1+0x20/0x20
[  622.828616]  ? kernfs_path_from_node+0x51/0x60
[  622.844768]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  622.844785]  sysfs_create_dir_ns+0x2a1/0x340
[  622.844800]  ? sysfs_create_mount_point+0xa0/0xa0
[  622.844829]  kobject_add_internal.cold.11+0x116/0x6af
[  622.844846]  ? kobj_ns_type_registered+0x60/0x60
[  622.844864]  ? kfree_const+0x59/0x70
[  622.844880]  ? rcu_read_lock_sched_held+0x14f/0x180
[  622.844894]  ? kfree+0x1f8/0x230
[  622.844914]  ? kfree_const+0x5e/0x70
[  622.858588]  kobject_init_and_add+0xf4/0x140
[  622.877275]  ? kobject_add_internal+0x4d0/0x4d0
[  622.877300]  ? gfs2_sys_fs_add+0x98/0x4f0
[  622.877319]  gfs2_sys_fs_add+0x1ff/0x4f0
[  622.877334]  ? recover_store+0x1a0/0x1a0
[  622.877351]  ? snprintf+0xae/0xe0
[  622.877366]  ? vscnprintf+0x70/0x80
[  622.877388]  ? memcpy+0x45/0x50
[  622.877408]  fill_super+0x89c/0x1a10
[  622.877423]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  622.877441]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  622.877454]  ? vsnprintf+0x20d/0x1b60
[  622.877482]  ? gfs2_online_uevent+0x2b0/0x2b0
[  622.877498]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  622.877519]  ? retint_kernel+0x2d/0x2d
[  622.877540]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  622.877551]  ? set_blocksize+0x2c1/0x340
[  622.877576]  gfs2_mount+0x5e6/0x712
[  622.877594]  ? fill_super+0x1a10/0x1a10
[  622.877631]  ? alloc_pages_current+0x17b/0x350
[  622.877650]  mount_fs+0xae/0x31d
[  622.877675]  vfs_kern_mount.part.35+0xdc/0x4f0
[  622.877694]  ? may_umount+0xb0/0xb0
[  622.877718]  ? _raw_read_unlock+0x2c/0x50
[  622.877734]  ? __get_fs_type+0x97/0xc0
[  622.877756]  do_mount+0x581/0x31f0
[  622.877773]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  622.877796]  ? copy_mount_string+0x40/0x40
[  622.877814]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  622.877834]  ? retint_kernel+0x2d/0x2d
[  622.877860]  ? copy_mount_options+0x239/0x430
[  622.877875]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  622.877889]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  622.877908]  ? copy_mount_options+0x315/0x430
[  622.894081]  ksys_mount+0x12d/0x140
[  622.906362]  __x64_sys_mount+0xbe/0x150
[  622.906383]  do_syscall_64+0x1b9/0x820
[  622.906399]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  622.906416]  ? syscall_return_slowpath+0x5e0/0x5e0
[  622.906431]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  622.906450]  ? trace_hardirqs_on_caller+0x310/0x310
[  622.906469]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  622.906488]  ? prepare_exit_to_usermode+0x291/0x3b0
[  622.906507]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  622.916874]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  622.926013] RIP: 0033:0x45a0ea
[  622.926030] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  622.926037] RSP: 002b:00007f153322da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  622.926048] RAX: ffffffffffffffda RBX: 00007f153322db30 RCX: 000000000045a0ea
[  622.926056] RDX: 00007f153322dad0 RSI: 0000000020000380 RDI: 00007f153322daf0
[  622.926064] RBP: 0000000020000380 R08: 00007f153322db30 R09: 00007f153322dad0
06:24:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900091123000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:10 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

06:24:10 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

[  622.926072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  622.926086] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  623.025916] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  623.050369] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  623.058404] gfs2: fsid=dh: error -17 adding sysfs files
[  623.060361] gfs2: fsid=dh: Now mounting FS...
[  623.071673] gfs2: not a GFS2 filesystem
[  623.098493] gfs2: fsid=dh: can't read superblock
[  623.200636] gfs2: fsid=dh: can't read superblock: -22
06:24:10 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

06:24:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa8430291000900390009fc23000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:10 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  623.349010] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  623.407863] CPU: 0 PID: 29732 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #371
[  623.415286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  623.415292] Call Trace:
[  623.415318]  dump_stack+0x244/0x39d
[  623.415342]  ? dump_stack_print_info.cold.1+0x20/0x20
[  623.415358]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  623.415381]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  623.415397]  sysfs_create_dir_ns+0x2a1/0x340
[  623.415412]  ? sysfs_create_mount_point+0xa0/0xa0
[  623.415429]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  623.415457]  kobject_add_internal.cold.11+0x116/0x6af
[  623.415475]  ? kobj_ns_type_registered+0x60/0x60
[  623.415492]  ? kfree_const+0x59/0x70
[  623.415508]  ? rcu_read_lock_sched_held+0x14f/0x180
[  623.415522]  ? kfree+0x1f8/0x230
[  623.415541]  ? kfree_const+0x5e/0x70
[  623.441418]  kobject_init_and_add+0xf4/0x140
[  623.441434]  ? kobject_add_internal+0x4d0/0x4d0
[  623.441457]  ? vsnprintf+0x20d/0x1b60
[  623.441481]  gfs2_sys_fs_add+0x1ff/0x4f0
[  623.441497]  ? recover_store+0x1a0/0x1a0
[  623.469857]  ? snprintf+0xae/0xe0
[  623.469872]  ? vscnprintf+0x70/0x80
[  623.469895]  ? memcpy+0x45/0x50
[  623.469927]  fill_super+0x89c/0x1a10
[  623.469956]  ? gfs2_online_uevent+0x2b0/0x2b0
[  623.469970]  ? retint_kernel+0x2d/0x2d
[  623.469995]  ? set_blocksize+0x23/0x340
[  623.479228]  ? __sanitizer_cov_trace_pc+0x2b/0x50
[  623.479248]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  623.479263]  ? set_blocksize+0x2c1/0x340
[  623.479289]  gfs2_mount+0x5e6/0x712
[  623.479305]  ? fill_super+0x1a10/0x1a10
[  623.479344]  ? alloc_pages_current+0x17b/0x350
[  623.479360]  mount_fs+0xae/0x31d
[  623.479381]  vfs_kern_mount.part.35+0xdc/0x4f0
[  623.479398]  ? may_umount+0xb0/0xb0
[  623.486467]  ? _raw_read_unlock+0x2c/0x50
[  623.486485]  ? __get_fs_type+0x97/0xc0
[  623.486508]  do_mount+0x581/0x31f0
[  623.486528]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  623.495585]  ? trace_hardirqs_on+0x310/0x310
[  623.495608]  ? copy_mount_string+0x40/0x40
[  623.495630]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  623.495662]  ? retint_kernel+0x2d/0x2d
[  623.495687]  ? copy_mount_options+0x239/0x430
[  623.495702]  ? copy_mount_options+0x247/0x430
[  623.495719]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  623.495733]  ? copy_mount_options+0x315/0x430
[  623.495752]  ksys_mount+0x12d/0x140
[  623.495771]  __x64_sys_mount+0xbe/0x150
[  623.503611]  do_syscall_64+0x1b9/0x820
[  623.503628]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  623.503647]  ? syscall_return_slowpath+0x5e0/0x5e0
[  623.503671]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  623.503690]  ? trace_hardirqs_on_caller+0x310/0x310
[  623.503711]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  623.663582]  ? prepare_exit_to_usermode+0x291/0x3b0
[  623.668611]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  623.673485]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  623.678693] RIP: 0033:0x45a0ea
[  623.681881] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  623.701149] RSP: 002b:00007fdbfe6dba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  623.708859] RAX: ffffffffffffffda RBX: 00007fdbfe6dbb30 RCX: 000000000045a0ea
[  623.716221] RDX: 00007fdbfe6dbad0 RSI: 0000000020000380 RDI: 00007fdbfe6dbaf0
[  623.723488] RBP: 0000000020000380 R08: 00007fdbfe6dbb30 R09: 00007fdbfe6dbad0
[  623.730756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  623.738042] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  623.749353] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  623.781711] gfs2: fsid=dh: error -17 adding sysfs files
[  623.791611] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090323000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  623.825780] gfs2: fsid=dh: Now mounting FS...
[  623.853694] gfs2: not a GFS2 filesystem
06:24:10 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

[  623.898647] gfs2: fsid=dh: can't read superblock
[  623.930130] gfs2: fsid=dh: can't read superblock: -22
[  623.946093] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  623.998151] CPU: 0 PID: 29754 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371
[  624.005583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  624.014966] Call Trace:
[  624.017592]  dump_stack+0x244/0x39d
[  624.021272]  ? dump_stack_print_info.cold.1+0x20/0x20
[  624.026501]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  624.031658]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  624.036107]  sysfs_create_dir_ns+0x2a1/0x340
[  624.040541]  ? sysfs_create_mount_point+0xa0/0xa0
[  624.045403]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  624.050187]  kobject_add_internal.cold.11+0x116/0x6af
[  624.055403]  ? kobj_ns_type_registered+0x60/0x60
[  624.060170]  ? kfree_const+0x59/0x70
[  624.060190]  ? rcu_read_lock_sched_held+0x14f/0x180
[  624.060208]  ? kfree+0x1f8/0x230
[  624.060227]  ? kfree_const+0x5e/0x70
[  624.060248]  kobject_init_and_add+0xf4/0x140
[  624.068966]  ? kobject_add_internal+0x4d0/0x4d0
[  624.069002]  gfs2_sys_fs_add+0x1ff/0x4f0
[  624.069019]  ? recover_store+0x1a0/0x1a0
[  624.069040]  ? snprintf+0xae/0xe0
[  624.069053]  ? vscnprintf+0x70/0x80
[  624.069073]  ? memcpy+0x45/0x50
[  624.069095]  fill_super+0x89c/0x1a10
[  624.069113]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  624.069127]  ? vsnprintf+0x20d/0x1b60
[  624.069148]  ? gfs2_online_uevent+0x2b0/0x2b0
[  624.076219]  ? pointer+0x900/0x900
[  624.076235]  ? match_strlcpy+0xcc/0x110
[  624.076256]  ? gfs2_mount_args+0x972/0xb10
[  624.076276]  ? snprintf+0xae/0xe0
[  624.076290]  ? vsprintf+0x40/0x40
[  624.076309]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
06:24:10 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900096023000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  624.076322]  ? set_blocksize+0x2c1/0x340
[  624.076347]  gfs2_mount+0x5e6/0x712
[  624.076367]  ? fill_super+0x1a10/0x1a10
[  624.085428]  ? trace_hardirqs_on_caller+0xc0/0x310
[  624.085472]  ? alloc_pages_current+0x17b/0x350
[  624.085493]  mount_fs+0xae/0x31d
[  624.085513]  vfs_kern_mount.part.35+0xdc/0x4f0
[  624.085531]  ? may_umount+0xb0/0xb0
[  624.085544]  ? _raw_read_unlock+0x2c/0x50
[  624.085557]  ? __get_fs_type+0x97/0xc0
[  624.085575]  do_mount+0x581/0x31f0
[  624.085590]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  624.085623]  ? copy_mount_string+0x40/0x40
[  624.097303]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  624.097328]  ? retint_kernel+0x2d/0x2d
[  624.097356]  ? copy_mount_options+0x1e3/0x430
[  624.097373]  ? copy_mount_options+0x1f5/0x430
[  624.104270]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  624.104288]  ? copy_mount_options+0x315/0x430
[  624.104311]  ksys_mount+0x12d/0x140
[  624.104333]  __x64_sys_mount+0xbe/0x150
[  624.104351]  ? do_syscall_64+0xca/0x820
[  624.113588]  do_syscall_64+0x1b9/0x820
[  624.113612]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  624.113632]  ? syscall_return_slowpath+0x5e0/0x5e0
[  624.113648]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  624.113665]  ? trace_hardirqs_on_caller+0x310/0x310
[  624.113683]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  624.267765]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  624.273325]  ? prepare_exit_to_usermode+0x291/0x3b0
[  624.278360]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  624.283206]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  624.288396] RIP: 0033:0x45a0ea
[  624.291593] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  624.310491] RSP: 002b:00007f153322da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  624.318198] RAX: ffffffffffffffda RBX: 00007f153322db30 RCX: 000000000045a0ea
[  624.325460] RDX: 00007f153322dad0 RSI: 0000000020000380 RDI: 00007f153322daf0
[  624.332726] RBP: 0000000020000380 R08: 00007f153322db30 R09: 00007f153322dad0
[  624.339987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
06:24:11 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000500))
pipe2(0x0, 0x80800)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)

[  624.347249] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  624.370556] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  624.387928] gfs2: fsid=dh: error -17 adding sysfs files
06:24:11 executing program 2 (fault-call:3 fault-nth:0):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:11 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

[  624.464670] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  624.510083] gfs2: fsid=dh: Now mounting FS...
06:24:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090007000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  624.540461] gfs2: not a GFS2 filesystem
[  624.558320] gfs2: fsid=dh: can't read superblock
06:24:11 executing program 3 (fault-call:8 fault-nth:0):
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  624.593535] gfs2: fsid=dh: can't read superblock: -22
06:24:11 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

[  624.638318] FAULT_INJECTION: forcing a failure.
[  624.638318] name failslab, interval 1, probability 0, space 0, times 0
[  624.679904] sysfs: cannot create duplicate filename '/fs/gfs2/dh'
[  624.703622] CPU: 0 PID: 29779 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #371
[  624.711043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  624.720398] Call Trace:
[  624.720422]  dump_stack+0x244/0x39d
[  624.720441]  ? dump_stack_print_info.cold.1+0x20/0x20
[  624.720457]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  624.720481]  sysfs_warn_dup.cold.3+0x1c/0x2b
[  624.720496]  sysfs_create_dir_ns+0x2a1/0x340
[  624.720513]  ? sysfs_create_mount_point+0xa0/0xa0
[  624.750681]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  624.755504]  kobject_add_internal.cold.11+0x116/0x6af
[  624.760730]  ? kobj_ns_type_registered+0x60/0x60
[  624.765513]  ? kfree_const+0x59/0x70
[  624.769259]  ? rcu_read_lock_sched_held+0x14f/0x180
[  624.774301]  ? kfree+0x1f8/0x230
[  624.777695]  ? kfree_const+0x5e/0x70
[  624.781438]  kobject_init_and_add+0xf4/0x140
[  624.785978]  ? kobject_add_internal+0x4d0/0x4d0
[  624.790769]  ? vsnprintf+0x20d/0x1b60
[  624.794609]  gfs2_sys_fs_add+0x1ff/0x4f0
[  624.798701]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  624.804275]  ? recover_store+0x1a0/0x1a0
[  624.804302]  ? snprintf+0xae/0xe0
[  624.804318]  ? vscnprintf+0x70/0x80
[  624.804345]  ? memcpy+0x45/0x50
[  624.818750]  fill_super+0x89c/0x1a10
[  624.818774]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
06:24:11 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090035000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  624.818793]  ? vsnprintf+0x20d/0x1b60
[  624.818821]  ? gfs2_online_uevent+0x2b0/0x2b0
[  624.828055]  ? pointer+0x900/0x900
[  624.828072]  ? match_strlcpy+0xcc/0x110
[  624.828095]  ? gfs2_mount_args+0x972/0xb10
[  624.828113]  ? snprintf+0xae/0xe0
[  624.828128]  ? vsprintf+0x40/0x40
[  624.828148]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  624.828161]  ? set_blocksize+0x2c1/0x340
[  624.828182]  gfs2_mount+0x5e6/0x712
[  624.828201]  ? fill_super+0x1a10/0x1a10
[  624.828242]  ? alloc_pages_current+0x17b/0x350
[  624.844010]  mount_fs+0xae/0x31d
[  624.855131]  vfs_kern_mount.part.35+0xdc/0x4f0
[  624.871767]  ? may_umount+0xb0/0xb0
[  624.871783]  ? _raw_read_unlock+0x2c/0x50
[  624.871809]  ? __get_fs_type+0x97/0xc0
[  624.887927]  do_mount+0x581/0x31f0
[  624.887948]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  624.887963]  ? retint_kernel+0x1b/0x2d
[  624.887985]  ? copy_mount_string+0x40/0x40
[  624.913182]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  624.917958]  ? retint_kernel+0x2d/0x2d
[  624.921868]  ? copy_mount_options+0x1e3/0x430
[  624.926817]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  624.931673]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  624.937219]  ? copy_mount_options+0x315/0x430
[  624.941733]  ksys_mount+0x12d/0x140
[  624.945378]  __x64_sys_mount+0xbe/0x150
[  624.949364]  do_syscall_64+0x1b9/0x820
[  624.953258]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  624.958639]  ? syscall_return_slowpath+0x5e0/0x5e0
[  624.963573]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  624.968428]  ? trace_hardirqs_on_caller+0x310/0x310
[  624.973454]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  624.978477]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  624.984020]  ? prepare_exit_to_usermode+0x291/0x3b0
[  624.989054]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  624.993913]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  624.999108] RIP: 0033:0x45a0ea
[  625.002307] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  625.021321] RSP: 002b:00007fdbfe6dba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  625.029035] RAX: ffffffffffffffda RBX: 00007fdbfe6dbb30 RCX: 000000000045a0ea
[  625.036328] RDX: 00007fdbfe6dbad0 RSI: 0000000020000380 RDI: 00007fdbfe6dbaf0
[  625.043609] RBP: 0000000020000380 R08: 00007fdbfe6dbb30 R09: 00007fdbfe6dbad0
[  625.050891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  625.058172] R13: 0000000000000000 R14: 00000000004d9b08 R15: 00000000ffffffff
[  625.065493] CPU: 1 PID: 29791 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371
[  625.069419] kobject_add_internal failed for dh with -EEXIST, don't try to register things with the same name in the same directory.
[  625.072874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  625.072886] Call Trace:
[  625.072911]  dump_stack+0x244/0x39d
[  625.072932]  ? dump_stack_print_info.cold.1+0x20/0x20
[  625.072954]  ? debug_smp_processor_id+0x1c/0x20
[  625.072973]  ? perf_trace_lock+0x14d/0x7a0
[  625.073001]  should_fail.cold.4+0xa/0x17
[  625.073023]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  625.073040]  ? debug_smp_processor_id+0x1c/0x20
[  625.073067]  ? mark_held_locks+0x130/0x130
[  625.073084]  ? zap_class+0x640/0x640
[  625.073103]  ? __lock_acquire+0x62f/0x4c20
[  625.073120]  ? __lock_acquire+0x62f/0x4c20
[  625.073141]  ? find_held_lock+0x36/0x1c0
[  625.073163]  ? __lock_is_held+0xb5/0x140
[  625.073265]  ? calipso_opt_del+0x118/0x500
[  625.073302]  ? perf_trace_sched_process_exec+0x860/0x860
[  625.073324]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  625.086223] gfs2: fsid=dh: error -17 adding sysfs files
[  625.094648]  ? check_preemption_disabled+0x48/0x280
[  625.094677]  ? zap_class+0x640/0x640
[  625.094700]  __should_failslab+0x124/0x180
[  625.094721]  should_failslab+0x9/0x14
[  625.094738]  kmem_cache_alloc_trace+0x2d7/0x750
[  625.094837]  unix_autobind.isra.30+0x1c7/0x870
[  625.094867]  ? maybe_init_creds+0x530/0x530
[  625.094887]  ? kasan_check_read+0x11/0x20
[  625.094902]  ? do_raw_spin_unlock+0xa7/0x330
[  625.094919]  ? do_raw_spin_trylock+0x270/0x270
[  625.094937]  ? unix_gc+0x15a0/0x15a0
[  625.094971]  unix_dgram_sendmsg+0xd05/0x1750
[  625.094992]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  625.095010]  ? aa_label_sk_perm+0x91/0x100
[  625.095041]  ? unix_stream_connect+0x1270/0x1270
[  625.095056]  ? aa_af_perm+0x5a0/0x5a0
[  625.095074]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  625.095089]  ? _copy_from_user+0xdf/0x150
[  625.095112]  ? aa_sock_msg_perm.isra.14+0xba/0x160
[  625.095132]  ? apparmor_socket_sendmsg+0x29/0x30
[  625.095150]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  625.095168]  ? security_socket_sendmsg+0x94/0xc0
[  625.095185]  ? unix_stream_connect+0x1270/0x1270
[  625.095204]  sock_sendmsg+0xd5/0x120
[  625.095224]  ___sys_sendmsg+0x7fd/0x930
[  625.095248]  ? copy_msghdr_from_user+0x580/0x580
[  625.095267]  ? lock_downgrade+0x900/0x900
[  625.095292]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  625.095311]  ? proc_fail_nth_write+0x9e/0x210
[  625.095333]  ? __fget_light+0x2e9/0x430
[  625.095349]  ? fget_raw+0x20/0x20
[  625.095364]  ? find_held_lock+0x36/0x1c0
[  625.095386]  ? kasan_check_write+0x14/0x20
[  625.095403]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  625.095424]  ? wait_for_completion+0x8a0/0x8a0
[  625.095452]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  625.095468]  ? sockfd_lookup_light+0xc5/0x160
[  625.095489]  __sys_sendmsg+0x11d/0x280
[  625.095509]  ? __ia32_sys_shutdown+0x80/0x80
[  625.095537]  ? __sb_end_write+0xd9/0x110
[  625.095558]  ? fput+0x130/0x1a0
[  625.095576]  ? do_syscall_64+0x9a/0x820
[  625.095592]  ? do_syscall_64+0x9a/0x820
[  625.095618]  ? trace_hardirqs_off_caller+0x310/0x310
[  625.166310] FAULT_INJECTION: forcing a failure.
[  625.166310] name failslab, interval 1, probability 0, space 0, times 0
[  625.169670]  __x64_sys_sendmsg+0x78/0xb0
[  625.169693]  do_syscall_64+0x1b9/0x820
[  625.388673]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  625.394051]  ? syscall_return_slowpath+0x5e0/0x5e0
[  625.398982]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  625.403832]  ? trace_hardirqs_on_caller+0x310/0x310
[  625.408857]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  625.413881]  ? prepare_exit_to_usermode+0x291/0x3b0
[  625.418927]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  625.424127]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  625.429321] RIP: 0033:0x457679
[  625.432523] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  625.451429] RSP: 002b:00007f438f88cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  625.459142] RAX: ffffffffffffffda RBX: 00007f438f88cc90 RCX: 0000000000457679
[  625.466415] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[  625.473691] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  625.481393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f438f88d6d4
[  625.488664] R13: 00000000004c3e7d R14: 00000000004d6cd0 R15: 0000000000000006
[  625.496073] CPU: 0 PID: 29799 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371
[  625.503444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  625.512797] Call Trace:
[  625.512819]  dump_stack+0x244/0x39d
[  625.512839]  ? dump_stack_print_info.cold.1+0x20/0x20
[  625.512858]  ? debug_smp_processor_id+0x1c/0x20
[  625.512874]  ? perf_trace_lock+0x14d/0x7a0
[  625.512896]  should_fail.cold.4+0xa/0x17
[  625.512916]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  625.512938]  ? find_held_lock+0x36/0x1c0
[  625.512964]  ? __f_unlock_pos+0x19/0x20
[  625.512986]  ? find_held_lock+0x36/0x1c0
[  625.513027]  ? perf_trace_sched_process_exec+0x860/0x860
[  625.560009]  __should_failslab+0x124/0x180
[  625.564246]  should_failslab+0x9/0x14
[  625.568043]  __kmalloc_track_caller+0x2d1/0x760
[  625.572710]  ? strncpy_from_user+0x5a0/0x5a0
[  625.577201]  ? digsig_verify+0x1530/0x1530
[  625.581431]  ? strndup_user+0x77/0xd0
[  625.585228]  memdup_user+0x2c/0xa0
[  625.588779]  strndup_user+0x77/0xd0
[  625.592403]  __x64_sys_add_key+0x198/0x4f0
[  625.596633]  ? key_get_type_from_user.constprop.6+0x110/0x110
[  625.602514]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  625.607874]  ? trace_hardirqs_off_caller+0x310/0x310
[  625.612982]  do_syscall_64+0x1b9/0x820
[  625.616864]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  625.622238]  ? syscall_return_slowpath+0x5e0/0x5e0
[  625.627162]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  625.632003]  ? trace_hardirqs_on_caller+0x310/0x310
[  625.637037]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  625.642064]  ? prepare_exit_to_usermode+0x291/0x3b0
[  625.647473]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  625.652321]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  625.657521] RIP: 0033:0x457679
[  625.660709] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
06:24:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  625.679618] RSP: 002b:00007f153322dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  625.687322] RAX: ffffffffffffffda RBX: 00007f153322dc90 RCX: 0000000000457679
[  625.694586] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000080
[  625.701847] RBP: 000000000072bf00 R08: fffffffffffffffb R09: 0000000000000000
[  625.709122] R10: 0000000000000214 R11: 0000000000000246 R12: 00007f153322e6d4
[  625.716385] R13: 00000000004bd785 R14: 00000000004cced8 R15: 0000000000000003
06:24:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:12 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:12 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

06:24:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0)
r1 = memfd_create(&(0x7f0000000380)='\x00', 0x4)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x80000, 0x0)
linkat(r1, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x1000)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000200))
fanotify_init(0x5, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x10}, 0x9}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000a9000000df4c9e0000000200130002000000000008000000000105000600200000000a000000001f000000000000030000000000000200010000000000000000000000000005000500000000000a00000000000000ff170000000000000000000000000017000000000000000000000000000000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x101001, 0x0)
ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000240))

[  625.833712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  625.850897] Option 'à¼v²yœ°pÄON' to dns_resolver key: bad/missing value
06:24:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:24:12 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='\nns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:12 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090048000c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:12 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x4800000000000000, 0x0}, 0x0)

[  625.976588] gfs2: not a GFS2 filesystem
06:24:12 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='%ns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:13 executing program 1:
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = eventfd2(0x0, 0x0)
fallocate(r0, 0x60, 0x0, 0x4)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x8000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
getresgid(&(0x7f00000007c0)=<r9=>0x0, &(0x7f00000005c0)=<r10=>0x0, &(0x7f0000000800)=<r11=>0x0)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="f63c890000cbb80600000000000000441022c0ea2a0c5e540200ffbd2a4aa686a6bbc3f5acfb7ba5d53bfdbe735a15fac405a8773826c45d134aeba00a5844a8a3e22becb70948a8600b418d7dc250cea4899d9f83f45053d075743b99476f4b6ce0c22ce60b3b25e96163b23e6e7bbaf80b8da4398ab623d44f9349359411a575e6112fc6b7df27429488d1e4bcb629bf1776968df7adab400bd5f9cdb95601a347c7a4ab150232ff32526ab4cec8a73b6c12d79bbaeeb1c64dca190c08a69256896fc9c729cc1687fd6892", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040000000000000008000400", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000200000000002000060000000000"], 0x64, 0x3)
fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x3}, [{0x2, 0x4, r3}, {0x2, 0x5, r5}, {0x2, 0x7, r7}], {0x4, 0x6}, [{0x8, 0x3, r9}, {0x8, 0x1, r12}], {0x10, 0x2}, {0x20, 0x6}}, 0x4c, 0x2)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xc7, 0x4})

06:24:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023030c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x48)

06:24:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:13 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x40000, 0x0}, 0x0)

06:24:13 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='.ns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023040c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:13 executing program 1:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/attr/current\x00', 0x2, 0x0)
inotify_init()
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/video0\x00', 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRESHEX])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
uselib(&(0x7f00000003c0)='./bus\x00')
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
syz_open_dev$sndtimer(&(0x7f0000000680)='/dev/snd/timer\x00', 0x0, 0x2000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x200, 0x4)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x2007fff)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4)
write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7)
write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7)
r6 = msgget(0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000440)=0xc)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, <r8=>0x0}, &(0x7f00000004c0)=0xc)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500)={<r9=>0x0}, &(0x7f0000000580)=0xc)
r10 = fcntl$getown(r3, 0x9)
msgctl$IPC_SET(r6, 0x1, &(0x7f00000005c0)={{0x3, r2, r7, r2, r8, 0x4, 0x6}, 0x0, 0x2, 0xfffffffffffff5b2, 0x1a9d, 0x9, 0x7, r9, r10})
sendfile(r1, r5, &(0x7f0000d83ff8)=0x38, 0x800000000024)
r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040))
getsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4)

06:24:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707000]}, 0x48)

06:24:13 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xffffff7f, 0x0}, 0x0)

06:24:13 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='d\ns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  626.429279] gfs2: not a GFS2 filesystem
06:24:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230048001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000]}, 0x48)

06:24:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:13 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='d%s_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:13 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x4000000000000, 0x0}, 0x0)

[  626.704764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  626.731436] gfs2: not a GFS2 filesystem
06:24:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000]}, 0x48)

06:24:13 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230025001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:13 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x803e000000000000, 0x0}, 0x0)

[  626.998088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  627.024329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:24:14 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
open$dir(&(0x7f0000000000)='./file0\x00', 0xc000, 0x60)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7f, 0x2000)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x9)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @rand_addr=0xcdeb}, {0x306, @dev={[], 0x19}}, 0x0, {0x2, 0x4e23, @empty}, 'teql0\x00'})
connect$inet6(r1, &(0x7f0000001ff2)={0xa, 0x0, 0x0, @mcast1}, 0x19)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000000c0))

06:24:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000]}, 0x48)

06:24:14 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnX_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:14 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x74000000, 0x0}, 0x0)

06:24:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023020c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:14 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnx_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023080c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:14 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x1000000, 0x0}, 0x0)

06:24:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x48)

06:24:14 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x8)
ioctl(r0, 0xca7, &(0x7f0000000080)="0a5c2d023c126285718070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x4, 0x0, &(0x7f00000000c0))
r3 = openat$cgroup_procs(r1, &(0x7f0000007480)='cgroup.threads\x00', 0x2, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x28013, r3, 0x0)

[  627.670228] gfs2: not a GFS2 filesystem
06:24:14 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnd_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

06:24:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:14 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x2000000, 0x0}, 0x0)

06:24:14 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230b0c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:14 executing program 1:
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
r0 = socket$packet(0x11, 0x4, 0x300)
set_mempolicy(0x3, &(0x7f0000000100)=0x6697, 0x5)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c)
semget(0x2, 0x3, 0x80)
r1 = semget$private(0x0, 0x2, 0x9)
semtimedop(r1, 0x0, 0xfffffffffffffe4c, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))

06:24:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

06:24:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
socket$inet6(0xa, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={<r3=>0x0, 0x3}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r3, 0x0, 0x2, [0x7, 0x9]}, &(0x7f0000000180)=0xc)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
syz_open_dev$mice(0x0, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x2007ff)

06:24:14 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dni_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023fc0c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:15 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xe03f0300, 0x0}, 0x0)

[  628.071466] gfs2: not a GFS2 filesystem
06:24:15 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dno_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805000]}, 0x48)

06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230011001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:15 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0)
close(r0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, [], [{0xe039, 0x0, 0x1, 0x4, 0x3, 0xe3c}, {0x100000000, 0x1, 0x3, 0x3f, 0x2, 0xfffffffffffffffe}], [[], []]})

06:24:15 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xc03e, 0x0}, 0x0)

06:24:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023060c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:15 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnc_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 1:
openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x226401, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0)
pipe(&(0x7f0000000300))
memfd_create(&(0x7f0000000340)='\x00', 0x1)
r0 = dup(0xffffffffffffff9c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x0, 0x20, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_create(0x0, 0xfffffffffffffffa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x1, 0x0, 0x0}, 0x20)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x402700, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x2b0000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
r5 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
getpeername$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000002c0)=0x1c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000400))
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
ioctl(r4, 0xffffffffffffffb7, &(0x7f0000000080))
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xfffffffffffffffc)
ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x4843cacf801ae7b1, 0x0, 0x400, 0x1, 0x80000000, 0x0, 0x9, 0x20, 0x0, 0x9, 0x8, 0x3f1ad92a, 0x0, 0x2, 0x7, 0xdcf2, 0x2, 0xffffffff, 0xff, 0x7, 0x1, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x7ff000, 0xda0, 0x2, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x32, 0x0, 0x9, 0x7, 0x1000000000, 0x1ff, 0x4d5})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000001c0)={0x7})
connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
write$9p(r2, &(0x7f0000000a80)="1873797da0c217edd5420ae52e44c624833b17431f280161e84a7d106058f741aee5bb0d3b152bcff5a7975c80a6ec421a848a8fb7a313edda933f276e6ea5ec675b01d96564eaeff6f05d0ee29aeea1d05057a3cf54", 0x56)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
fstat(r2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140)=0xfffffffffffffe4f)
geteuid()
fstat(r5, 0x0)

[  628.469291] gfs2: not a GFS2 filesystem
06:24:15 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dn\n_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x7a00000000000000, 0x0}, 0x0)

06:24:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000]}, 0x48)

06:24:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023070c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:15 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnp_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x48000000, 0x0}, 0x0)

06:24:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200), 0xc, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

[  628.769258] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023110c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  628.874029] gfs2: fsid=dh: Now mounting FS...
[  628.901351] gfs2: not a GFS2 filesystem
[  628.924565] gfs2: fsid=dh: can't read superblock
06:24:15 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

[  628.955542] gfs2: fsid=dh: can't read superblock: -22
06:24:15 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnu_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:15 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x74, 0x0}, 0x0)

06:24:15 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023090c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  629.038122] gfs2: not a GFS2 filesystem
06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff]}, 0x48)

[  629.159035] cgroup: fork rejected by pids controller in /syz3
06:24:16 executing program 1:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380), 0x0)
r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0)
sendto$inet(r1, &(0x7f00000001c0), 0x3a36a8, 0x0, 0x0, 0x300)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r2=>0x0})
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={r2}, 0x8)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0)

06:24:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:16 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dnl_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508000]}, 0x48)

06:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:16 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x11, 0x0}, 0x0)

[  629.337947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:24:16 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dn%_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230a0c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  629.402273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  629.476635] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  629.483726] gfs2: fsid=dh: Now mounting FS...
06:24:16 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns\nresolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  629.549888] gfs2: not a GFS2 filesystem
[  629.556506] gfs2: fsid=dh: can't read superblock
[  629.561789] gfs2: fsid=dh: can't read superblock: -22
06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:24:16 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x3e80, 0x0}, 0x0)

06:24:16 executing program 1:
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket$kcm(0xa, 0x2, 0x88)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
io_setup(0x5, &(0x7f00000001c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000200)="17287cfc5673d43714ac38cb96cc87fc040ba2d523c89f9124d6ac86fbd7eae7a734b6cfa6ce3279ae5ce4453f06876a878d9f235ebe776983ae46c36e55ef1bedb444785f150150b8d14b817edce627dae2304d42514aa828ddbb9998226314a0b5faa997533951169497b35fdf02e95607eca26b86ef084fa975b08378f42f1694f432edc810085575b9a0cb619536a665296ccd78d5f1e58d4ea619c04e4d9fa00ed7275b034d5c55d97ed107f748640b", 0xb2, 0x7, 0x0, 0x2, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000300), 0x0, 0x9, 0x0, 0x0, r2}])
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x4, 0x8, 0xcc44, 0xff, "1d5c91fca69de1285e276b5fc84459bd78a6d9f7a09bbbd6dbb5b014f9dc7a3b"})
umount2(&(0x7f0000000180)='./file0\x00', 0xd)
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040))
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}, 0x8800)
close(r1)

06:24:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023100c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:16 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x7a, 0x0}, 0x0)

06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

06:24:16 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns%resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023130c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x400000000004)
write(r0, &(0x7f0000000140)="2700000014000707030e0000120f0af010000100f5fe0012ff000000078a153900050000000180", 0x27)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r2=>0x0})
sendmsg$TIPC_NL_MON_GET(r0, 0xfffffffffffffffe, 0x8001)
recvmmsg(r0, &(0x7f00000002c0), 0x2, 0x0, &(0x7f0000006700)={0x0, r2+10000000})
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0xe9, "7f71ceceb1f099556996b0e3e48e51bdef6bb949b3fa8df9d7098f1e3ab545c39ab95c3eeaae0531eed16f05c0270020f237af464da0f27aee4aabf8240be2b5002da2b7059e0d80d8e8e26dab339770bd542203f1d1b0ac7432fca4b67350b154cc5330d492785d12bcb0d34f76ed368b02c539be45cfafdf0992ce5f0bff16b73aff8383442240fdb10e15dc8da241157c532668774ef995e6dcde90a92156db841d71a5e74f4a65ebb315250c59eed69b19d1acfaf5e210851332b71b5d488524cd053aed4354081ada53e021f744027580c34edd16bf06ede2c6cbca9e4b97d35a7a2725566bf3"})

06:24:16 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023050c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:16 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x68000000, 0x0}, 0x0)

06:24:16 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_\nesolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:16 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

[  630.016759] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
06:24:17 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe13, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={<r1=>0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x400, 0x9, 0x7, 0xad]})
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000007c0)=""/255)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$bt_sco(r2, &(0x7f0000000200)={0x1f, {0xe04, 0x5, 0x1f, 0x6, 0x100000001, 0x100}}, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt(r3, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={<r4=>0x0, @in, [0x5, 0x3, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100)
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r4, 0xfffffffffffffff7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170)
getpeername(r0, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80)
r7 = dup(r6)
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={r4, 0x6}, &(0x7f0000000640)=0x8)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f00000004c0)={0xb, {0x3, 0x1, 0x1, 0x2800000}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0900000000000000240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000804ca000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000f1b54a581b10baa0adc0f7d05a5500fa0fe6369933ebc3b972b7d01098dc8373440dc98a1ac95465375c8d1fc1"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

[  630.076147] gfs2: fsid=dh: Now mounting FS...
06:24:17 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023600c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  630.133590] gfs2: not a GFS2 filesystem
[  630.185694] gfs2: fsid=dh: can't read superblock
[  630.190536] gfs2: fsid=dh: can't read superblock: -22
[  630.360974] 
[  630.362634] ======================================================
[  630.365695] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  630.368942] WARNING: possible circular locking dependency detected
[  630.375493] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  630.381646] 4.20.0-rc6+ #371 Not tainted
[  630.381650] ------------------------------------------------------
[  630.381658] syz-executor1/30248 is trying to acquire lock:
[  630.381664] 000000003519ed03 (&sb->s_type->i_mutex_key#4){++++}, at: start_creating+0xb1/0x200
[  630.381782] 
[  630.381782] but task is already holding lock:
[  630.421898] 00000000107a24c8 (relay_channels_mutex){+.+.}, at: relay_open+0x478/0xac0
[  630.429905] 
[  630.429905] which lock already depends on the new lock.
[  630.429905] 
[  630.438222] 
[  630.438222] the existing dependency chain (in reverse order) is:
[  630.445825] 
[  630.445825] -> #3 (relay_channels_mutex){+.+.}:
[  630.451971]        __mutex_lock+0x166/0x16f0
[  630.456367]        mutex_lock_nested+0x16/0x20
[  630.460951]        relay_prepare_cpu+0x2a/0x28b
[  630.465609]        cpuhp_invoke_callback+0x365/0x2160
[  630.470782]        _cpu_up+0x290/0x570
[  630.474779]        do_cpu_up+0x1ca/0x210
[  630.478825]        cpu_up+0x18/0x20
[  630.482506]        smp_init+0x1a3/0x1c1
[  630.486478]        kernel_init_freeable+0x434/0x6bf
[  630.491482]        kernel_init+0x11/0x1ae
[  630.495809]        ret_from_fork+0x3a/0x50
[  630.500025] 
[  630.500025] -> #2 (cpu_hotplug_lock.rw_sem){++++}:
[  630.506535]        cpus_read_lock+0x3e/0xd0
[  630.510854]        static_key_slow_dec+0x57/0xa0
[  630.515621]        sw_perf_event_destroy+0x8b/0x140
[  630.520626]        _free_event+0x414/0x1660
[  630.524930]        put_event+0x48/0x60
[  630.528820]        perf_mmap_close+0x62f/0x1220
[  630.533484]        remove_vma+0xb1/0x180
[  630.537528]        __do_munmap+0x751/0xf80
[  630.541745]        mmap_region+0x6a7/0x1cd0
[  630.546059]        do_mmap+0xa22/0x1230
[  630.550028]        vm_mmap_pgoff+0x213/0x2c0
[  630.554441]        ksys_mmap_pgoff+0x4da/0x660
[  630.559023]        __x64_sys_mmap+0xe9/0x1b0
[  630.563428]        do_syscall_64+0x1b9/0x820
[  630.567838]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  630.573544] 
[  630.573544] -> #1 (&mm->mmap_sem){++++}:
[  630.579085]        __might_fault+0x15e/0x1e0
[  630.583482]        _copy_to_user+0x30/0x110
[  630.587792]        filldir64+0x23f/0x3e0
[  630.591905]        dcache_readdir+0x13a/0x620
[  630.596387]        iterate_dir+0x48c/0x5d0
[  630.600614]        ksys_getdents64+0x228/0x450
[  630.605283]        __x64_sys_getdents64+0x73/0xb0
[  630.610117]        do_syscall_64+0x1b9/0x820
[  630.614538]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  630.620234] 
[  630.620234] -> #0 (&sb->s_type->i_mutex_key#4){++++}:
[  630.626915]        lock_acquire+0x1ed/0x520
[  630.631231]        down_write+0x8a/0x130
[  630.635285]        start_creating+0xb1/0x200
[  630.639687]        __debugfs_create_file+0x63/0x400
[  630.644707]        debugfs_create_file+0x57/0x70
[  630.649465]        blk_create_buf_file_callback+0x33/0x40
[  630.654997]        relay_create_buf_file+0xf6/0x150
[  630.660011]        relay_open_buf.part.10+0x753/0xb20
[  630.665203]        relay_open+0x5e5/0xac0
[  630.669338]        do_blk_trace_setup+0x4fe/0xdb0
[  630.674165]        __blk_trace_setup+0xd5/0x180
[  630.678823]        blk_trace_ioctl+0x17a/0x2f0
[  630.683463]        blkdev_ioctl+0x9e9/0x21b0
[  630.687858]        block_ioctl+0xee/0x130
[  630.691990]        do_vfs_ioctl+0x1de/0x1790
[  630.696475]        ksys_ioctl+0xa9/0xd0
[  630.700547]        __x64_sys_ioctl+0x73/0xb0
[  630.704966]        do_syscall_64+0x1b9/0x820
[  630.709378]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  630.715082] 
[  630.715082] other info that might help us debug this:
[  630.715082] 
[  630.723206] Chain exists of:
[  630.723206]   &sb->s_type->i_mutex_key#4 --> cpu_hotplug_lock.rw_sem --> relay_channels_mutex
[  630.723206] 
[  630.736207]  Possible unsafe locking scenario:
[  630.736207] 
[  630.742250]        CPU0                    CPU1
[  630.746923]        ----                    ----
[  630.751573]   lock(relay_channels_mutex);
[  630.755719]                                lock(cpu_hotplug_lock.rw_sem);
[  630.762633]                                lock(relay_channels_mutex);
[  630.769277]   lock(&sb->s_type->i_mutex_key#4);
[  630.773953] 
[  630.773953]  *** DEADLOCK ***
[  630.773953] 
[  630.780001] 2 locks held by syz-executor1/30248:
[  630.784746]  #0: 00000000c80a2dbb (&q->blk_trace_mutex){+.+.}, at: blk_trace_ioctl+0xeb/0x2f0
[  630.793421]  #1: 00000000107a24c8 (relay_channels_mutex){+.+.}, at: relay_open+0x478/0xac0
[  630.801825] 
[  630.801825] stack backtrace:
[  630.806315] CPU: 0 PID: 30248 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #371
[  630.813654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  630.822993] Call Trace:
[  630.825600]  dump_stack+0x244/0x39d
[  630.829220]  ? dump_stack_print_info.cold.1+0x20/0x20
[  630.834523]  ? vprintk_func+0x85/0x181
[  630.838406]  print_circular_bug.isra.35.cold.54+0x1bd/0x27d
[  630.844130]  ? save_trace+0xe0/0x290
[  630.847841]  __lock_acquire+0x3399/0x4c20
[  630.851990]  ? mark_held_locks+0x130/0x130
[  630.856218]  ? print_usage_bug+0xc0/0xc0
[  630.860269]  ? mark_held_locks+0x130/0x130
[  630.864495]  ? mark_held_locks+0xc7/0x130
[  630.868634]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  630.873470]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[  630.878056]  ? retint_kernel+0x2d/0x2d
[  630.882053]  ? trace_hardirqs_on_caller+0xc0/0x310
[  630.886976]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  630.892523]  ? zap_class+0x640/0x640
[  630.896229]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  630.900984]  ? __lock_is_held+0xb5/0x140
[  630.905046]  lock_acquire+0x1ed/0x520
[  630.908835]  ? start_creating+0xb1/0x200
06:24:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:17 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x6800, 0x0}, 0x0)

06:24:17 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_%esolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:17 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff]}, 0x48)

[  630.912893]  ? lock_release+0xa00/0xa00
[  630.916879]  ? perf_trace_sched_process_exec+0x860/0x860
[  630.922324]  down_write+0x8a/0x130
[  630.925868]  ? start_creating+0xb1/0x200
[  630.929919]  ? down_read+0x120/0x120
[  630.933635]  ? mntput+0x74/0xa0
[  630.936925]  ? simple_pin_fs+0xa4/0x190
[  630.940916]  start_creating+0xb1/0x200
[  630.944808]  __debugfs_create_file+0x63/0x400
[  630.949297]  debugfs_create_file+0x57/0x70
[  630.953532]  blk_create_buf_file_callback+0x33/0x40
[  630.958561]  ? blk_trace_remove+0x40/0x40
[  630.962718]  relay_create_buf_file+0xf6/0x150
[  630.967203]  relay_open_buf.part.10+0x753/0xb20
[  630.971859]  ? kmem_cache_alloc_trace+0x353/0x750
[  630.976703]  relay_open+0x5e5/0xac0
[  630.980329]  ? relay_open_buf.part.10+0xb20/0xb20
[  630.985160]  ? __debugfs_create_file+0x302/0x400
[  630.989907]  ? debugfs_create_file+0x57/0x70
[  630.994304]  do_blk_trace_setup+0x4fe/0xdb0
[  630.998614]  ? blk_tracer_print_line+0x60/0x60
[  631.003200]  ? retint_kernel+0x2d/0x2d
[  631.007080]  __blk_trace_setup+0xd5/0x180
[  631.011250]  ? do_blk_trace_setup+0xdb0/0xdb0
[  631.015747]  ? disk_name+0xb0/0x120
[  631.019364]  blk_trace_ioctl+0x17a/0x2f0
[  631.023416]  ? blk_trace_startstop+0x70/0x70
[  631.027816]  ? blkdev_ioctl+0xe1/0x21b0
[  631.031798]  ? write_comp_data+0x22/0x70
[  631.035850]  blkdev_ioctl+0x9e9/0x21b0
[  631.039726]  ? blkpg_ioctl+0xc10/0xc10
[  631.043704]  ? lock_downgrade+0x900/0x900
[  631.047839]  ? check_preemption_disabled+0x48/0x280
[  631.052942]  ? rcu_read_unlock_special+0x1c0/0x1c0
[  631.057873]  ? kasan_check_read+0x11/0x20
[  631.062021]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[  631.067290]  ? rcu_softirq_qs+0x20/0x20
[  631.071271]  ? __fget+0x4d1/0x740
[  631.074730]  ? ksys_dup3+0x680/0x680
[  631.078427]  ? __might_fault+0x12b/0x1e0
[  631.082510]  ? lock_downgrade+0x900/0x900
[  631.086646]  block_ioctl+0xee/0x130
[  631.090259]  ? blkdev_fallocate+0x400/0x400
[  631.094685]  do_vfs_ioctl+0x1de/0x1790
[  631.098557]  ? ioctl_preallocate+0x300/0x300
[  631.102951]  ? __fget_light+0x2e9/0x430
[  631.106909]  ? fget_raw+0x20/0x20
[  631.110346]  ? _copy_to_user+0xc8/0x110
[  631.114314]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  631.119924]  ? put_timespec64+0x10f/0x1b0
[  631.124062]  ? nsecs_to_jiffies+0x30/0x30
[  631.128202]  ? do_syscall_64+0x9a/0x820
[  631.132167]  ? do_syscall_64+0x9a/0x820
[  631.136130]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[  631.140697]  ? security_file_ioctl+0x94/0xc0
[  631.145091]  ksys_ioctl+0xa9/0xd0
[  631.148530]  __x64_sys_ioctl+0x73/0xb0
[  631.152412]  do_syscall_64+0x1b9/0x820
[  631.156294]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  631.161645]  ? syscall_return_slowpath+0x5e0/0x5e0
[  631.166559]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  631.171388]  ? trace_hardirqs_on_caller+0x310/0x310
[  631.176391]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  631.181393]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  631.186919]  ? prepare_exit_to_usermode+0x291/0x3b0
[  631.191925]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  631.196770]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  631.201978] RIP: 0033:0x457679
[  631.205165] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  631.224068] RSP: 002b:00007fdbfe6bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  631.231770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679
[  631.239029] RDX: 0000000020000340 RSI: 00000000c0481273 RDI: 0000000000000007
[  631.246285] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000
[  631.253558] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbfe6bb6d4
06:24:18 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_r\nsolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  631.260817] R13: 00000000004bec66 R14: 00000000004cf908 R15: 00000000ffffffff
[  631.282942] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  631.302374] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  631.321819] kobject: 'brif' (000000004c10180e): kobject_add_internal: parent: 'þ€', set: '<NULL>'
[  631.344224] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  631.356820] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
06:24:18 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x7a00, 0x0}, 0x0)

06:24:18 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023120c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:18 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

[  631.369089] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  631.382616] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  631.445699] kobject: 'dh' (00000000d6d0ec9f): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  631.449558] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  631.481772] kobject: 'brif' (000000004c10180e): kobject_cleanup, parent 00000000c014928f
06:24:18 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_r%solver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:18 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7100]}, 0x48)

[  631.493703] kobject: 'dh' (00000000d6d0ec9f): kobject_uevent_env
[  631.513656] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  631.534751] kobject: 'brif' (000000004c10180e): auto cleanup kobject_del
[  631.542939] kobject: 'dh' (00000000d6d0ec9f): fill_kobj_path: path = '/fs/gfs2/dh'
[  631.546819] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  631.551422] kobject: 'brif' (000000004c10180e): calling ktype release
[  631.559156] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  631.569863] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  631.581196] kobject: (000000004c10180e): dynamic_kobj_release
[  631.582310] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  631.587595] kobject: 'brif': free name
[  631.595118] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  631.599177] gfs2: fsid=dh: Now mounting FS...
[  631.612877] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  631.621431] kobject: 'rx-0' (00000000ed93ed28): kobject_cleanup, parent 000000005929d2e6
[  631.636361] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  631.645674] kobject: 'rx-0' (00000000ed93ed28): auto cleanup 'remove' event
[  631.654099] gfs2: not a GFS2 filesystem
[  631.660926] gfs2: fsid=dh: can't read superblock
[  631.661767] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  631.672264] gfs2: fsid=dh: can't read superblock: -22
[  631.677695] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  631.677930] kobject: 'rx-0' (00000000ed93ed28): kobject_uevent_env
[  631.690839] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  631.700541] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  631.703629] kobject: 'rx-0' (00000000ed93ed28): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0'
[  631.710970] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  631.727076] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  631.770698] kobject: 'rx-0' (00000000ed93ed28): auto cleanup kobject_del
[  631.792981] kobject: 'dh' (00000000d6d0ec9f): kobject_cleanup, parent 000000005982070f
[  631.802327] kobject: 'rx-0' (00000000ed93ed28): calling ktype release
[  631.809357] kobject: 'rx-0': free name
[  631.813639] kobject: 'dh' (00000000d6d0ec9f): auto cleanup 'remove' event
[  631.821495] kobject: 'tx-0' (00000000f3fbf733): kobject_cleanup, parent 000000005929d2e6
[  631.829502] kobject: 'dh' (00000000d6d0ec9f): kobject_uevent_env
[  631.830118] kobject: 'tx-0' (00000000f3fbf733): auto cleanup 'remove' event
[  631.836258] kobject: 'dh' (00000000d6d0ec9f): fill_kobj_path: path = '/fs/gfs2/dh'
[  631.843615] kobject: 'tx-0' (00000000f3fbf733): kobject_uevent_env
[  631.852776] kobject: 'dh' (00000000d6d0ec9f): auto cleanup kobject_del
[  631.857856] kobject: 'tx-0' (00000000f3fbf733): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/tx-0'
[  631.864657] kobject: 'dh' (00000000d6d0ec9f): calling ktype release
[  631.875014] kobject: 'tx-0' (00000000f3fbf733): auto cleanup kobject_del
[  631.881158] kobject: 'dh': free name
[  631.888126] kobject: 'tx-0' (00000000f3fbf733): calling ktype release
[  631.898429] kobject: 'tx-0': free name
[  631.902475] kobject: 'queues' (000000005929d2e6): kobject_cleanup, parent           (null)
[  631.911067] kobject: 'queues' (000000005929d2e6): calling ktype release
[  631.918247] kobject: 'queues' (000000005929d2e6): kset_release
[  631.924366] kobject: 'queues': free name
[  631.925435] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  631.928976] kobject: 'þ€' (00000000c014928f): kobject_uevent_env
[  631.935227] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  631.941374] kobject: 'þ€' (00000000c014928f): fill_kobj_path: path = '/devices/virtual/net/þ€'
[  631.989699] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  631.997347] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  632.007268] kobject: 'þ€' (00000000c014928f): kobject_cleanup, parent           (null)
[  632.011666] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  632.015738] kobject: 'þ€' (00000000c014928f): calling ktype release
[  632.021839] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  632.038248] kobject: 'þ€': free name
[  632.042509] kobject: 'þ€' (00000000eca87e39): kobject_add_internal: parent: 'net', set: 'devices'
[  632.052782] kobject: 'þ€' (00000000eca87e39): kobject_uevent_env
[  632.059198] kobject: 'þ€' (00000000eca87e39): fill_kobj_path: path = '/devices/virtual/net/þ€'
[  632.068312] kobject: 'queues' (000000005f3c3b1d): kobject_add_internal: parent: 'þ€', set: '<NULL>'
[  632.077798] kobject: 'queues' (000000005f3c3b1d): kobject_uevent_env
[  632.084418] kobject: 'queues' (000000005f3c3b1d): kobject_uevent_env: filter function caused the event to drop!
[  632.094858] kobject: 'rx-0' (0000000099841652): kobject_add_internal: parent: 'queues', set: 'queues'
[  632.104569] kobject: 'rx-0' (0000000099841652): kobject_uevent_env
[  632.111219] kobject: 'rx-0' (0000000099841652): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0'
[  632.121451] kobject: 'tx-0' (000000005ed0c84b): kobject_add_internal: parent: 'queues', set: 'queues'
[  632.131196] kobject: 'tx-0' (000000005ed0c84b): kobject_uevent_env
06:24:19 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe13, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={<r1=>0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x400, 0x9, 0x7, 0xad]})
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000007c0)=""/255)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$bt_sco(r2, &(0x7f0000000200)={0x1f, {0xe04, 0x5, 0x1f, 0x6, 0x100000001, 0x100}}, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt(r3, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={<r4=>0x0, @in, [0x5, 0x3, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100)
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r4, 0xfffffffffffffff7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170)
getpeername(r0, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80)
r7 = dup(r6)
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={r4, 0x6}, &(0x7f0000000640)=0x8)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f00000004c0)={0xb, {0x3, 0x1, 0x1, 0x2800000}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0900000000000000240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000804ca000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000f1b54a581b10baa0adc0f7d05a5500fa0fe6369933ebc3b972b7d01098dc8373440dc98a1ac95465375c8d1fc1"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

06:24:19 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffdef, 0x0}, 0x0)

06:24:19 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_reoolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:19 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

06:24:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x44000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:19 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230f0c001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  632.137744] kobject: 'tx-0' (000000005ed0c84b): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/tx-0'
[  632.148744] kobject: 'brif' (0000000032774ee1): kobject_add_internal: parent: 'þ€', set: '<NULL>'
06:24:19 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_rexolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:19 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x48)

[  632.201176] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  632.209056] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  632.213947] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  632.248809] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  632.262053] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  632.263452] kobject: 'brif' (0000000032774ee1): kobject_cleanup, parent 00000000eca87e39
06:24:19 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:19 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x7400000000000000, 0x0}, 0x0)

06:24:19 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_re\nolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  632.292539] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  632.299999] kobject: 'brif' (0000000032774ee1): auto cleanup kobject_del
[  632.322110] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
06:24:19 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000]}, 0x48)

[  632.348762] kobject: 'brif' (0000000032774ee1): calling ktype release
[  632.360646] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  632.383422] kobject: 'dh' (000000006613d4f8): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  632.397983] kobject: (0000000032774ee1): dynamic_kobj_release
[  632.413491] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  632.436925] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  632.466018] kobject: 'brif': free name
[  632.472932] kobject: 'dh' (000000006613d4f8): kobject_uevent_env
[  632.474341] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  632.491670] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  632.502372] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  632.509300] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  632.519715] kobject: 'dh' (000000006613d4f8): fill_kobj_path: path = '/fs/gfs2/dh'
[  632.523845] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  632.535431] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  632.545691] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  632.552329] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  632.586020] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  632.592895] gfs2: fsid=dh: Now mounting FS...
[  632.605571] kobject: 'rx-0' (0000000099841652): kobject_cleanup, parent 000000005f3c3b1d
[  632.620670] kobject: 'rx-0' (0000000099841652): auto cleanup 'remove' event
[  632.632247] gfs2: not a GFS2 filesystem
[  632.636671] gfs2: fsid=dh: can't read superblock
[  632.641782] gfs2: fsid=dh: can't read superblock: -22
[  632.647534] kobject: 'rx-0' (0000000099841652): kobject_uevent_env
[  632.654599] kobject: 'rx-0' (0000000099841652): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0'
[  632.659495] kobject: 'dh' (000000006613d4f8): kobject_cleanup, parent 000000005982070f
[  632.666152] kobject: 'rx-0' (0000000099841652): auto cleanup kobject_del
[  632.673105] kobject: 'dh' (000000006613d4f8): auto cleanup 'remove' event
[  632.680318] kobject: 'rx-0' (0000000099841652): calling ktype release
[  632.687001] kobject: 'dh' (000000006613d4f8): kobject_uevent_env
[  632.693749] kobject: 'rx-0': free name
[  632.700288] kobject: 'dh' (000000006613d4f8): fill_kobj_path: path = '/fs/gfs2/dh'
[  632.704921] kobject: 'tx-0' (000000005ed0c84b): kobject_cleanup, parent 000000005f3c3b1d
[  632.713026] kobject: 'dh' (000000006613d4f8): auto cleanup kobject_del
[  632.720106] kobject: 'tx-0' (000000005ed0c84b): auto cleanup 'remove' event
[  632.727035] kobject: 'dh' (000000006613d4f8): calling ktype release
[  632.734111] kobject: 'tx-0' (000000005ed0c84b): kobject_uevent_env
[  632.740658] kobject: 'dh': free name
[  632.747541] kobject: 'tx-0' (000000005ed0c84b): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/tx-0'
[  632.761635] kobject: 'tx-0' (000000005ed0c84b): auto cleanup kobject_del
[  632.769077] kobject: 'tx-0' (000000005ed0c84b): calling ktype release
[  632.776087] kobject: 'tx-0': free name
[  632.780773] kobject: 'queues' (000000005f3c3b1d): kobject_cleanup, parent           (null)
[  632.785420] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  632.789556] kobject: 'queues' (000000005f3c3b1d): calling ktype release
[  632.796193] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  632.802859] kobject: 'queues' (000000005f3c3b1d): kset_release
[  632.820751] kobject: 'queues': free name
[  632.836343] kobject: 'þ€' (00000000eca87e39): kobject_uevent_env
[  632.843907] kobject: 'þ€' (00000000eca87e39): fill_kobj_path: path = '/devices/virtual/net/þ€'
[  632.854140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  632.861252] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  632.868055] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  632.885691] kobject: 'þ€' (00000000eca87e39): kobject_cleanup, parent           (null)
[  632.896298] kobject: 'þ€' (00000000eca87e39): calling ktype release
[  632.903586] kobject: 'þ€': free name
[  632.908451] kobject: 'þ€' (00000000db417cad): kobject_add_internal: parent: 'net', set: 'devices'
[  632.920992] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  632.925476] kobject: 'þ€' (00000000db417cad): kobject_uevent_env
[  632.929434] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  632.937550] kobject: 'þ€' (00000000db417cad): fill_kobj_path: path = '/devices/virtual/net/þ€'
[  632.952468] kobject: 'queues' (00000000e3a74ccb): kobject_add_internal: parent: 'þ€', set: '<NULL>'
[  632.962253] kobject: 'queues' (00000000e3a74ccb): kobject_uevent_env
[  632.969070] kobject: 'queues' (00000000e3a74ccb): kobject_uevent_env: filter function caused the event to drop!
[  632.979542] kobject: 'rx-0' (00000000e9e9a3c9): kobject_add_internal: parent: 'queues', set: 'queues'
[  632.989216] kobject: 'rx-0' (00000000e9e9a3c9): kobject_uevent_env
[  632.995769] kobject: 'rx-0' (00000000e9e9a3c9): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0'
[  633.006032] kobject: 'tx-0' (00000000e272c927): kobject_add_internal: parent: 'queues', set: 'queues'
[  633.015766] kobject: 'tx-0' (00000000e272c927): kobject_uevent_env
[  633.022255] kobject: 'tx-0' (00000000e272c927): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/tx-0'
06:24:19 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:19 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_re%olver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:19 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730000000000]}, 0x48)

06:24:19 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xffffff7f00000000, 0x0}, 0x0)

06:24:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:19 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230048001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  633.033256] kobject: 'brif' (00000000b36d1943): kobject_add_internal: parent: 'þ€', set: '<NULL>'
06:24:20 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_reXolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  633.098470] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  633.109926] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
06:24:20 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xc000000000000000, 0x0}, 0x0)

06:24:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230011001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  633.140997] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  633.146937] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  633.151739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.160518] IPv6: NLM_F_CREATE should be set when creating new route
[  633.162998] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  633.167104] IPv6: NLM_F_CREATE should be set when creating new route
06:24:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930000000000]}, 0x48)

[  633.191187] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  633.199438] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  633.207526] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
06:24:20 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_relolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230025001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  633.254504] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  633.287595] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
06:24:20 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:20 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x4c00000000000000, 0x0}, 0x0)

[  633.290648] kobject: 'dh' (000000002205ba4c): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  633.306967] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  633.306998] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  633.337603] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  633.355144] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  633.374822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.396540] kobject: 'dh' (000000002205ba4c): kobject_uevent_env
06:24:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80500000000000]}, 0x48)

06:24:20 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_redolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[  633.404313] kobject: 'dh' (000000002205ba4c): fill_kobj_path: path = '/fs/gfs2/dh'
[  633.411859] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  633.417287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.426006] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  633.451749] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  633.468007] gfs2: fsid=dh: Now mounting FS...
[  633.484939] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  633.497463] gfs2: not a GFS2 filesystem
[  633.501491] gfs2: fsid=dh: can't read superblock
[  633.508173] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  633.520855] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  633.527741] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  633.535401] gfs2: fsid=dh: can't read superblock: -22
[  633.537827] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  633.549100] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  633.563344] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  633.569944] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  633.580108] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  633.593651] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  633.605725] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  633.609836] kobject: 'dh' (000000002205ba4c): kobject_cleanup, parent 000000005982070f
[  633.612218] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  633.630967] kobject: 'dh' (000000002205ba4c): auto cleanup 'remove' event
[  633.641585] kobject: 'dh' (000000002205ba4c): kobject_uevent_env
[  633.657515] kobject: 'dh' (000000002205ba4c): fill_kobj_path: path = '/fs/gfs2/dh'
[  633.669821] kobject: 'dh' (000000002205ba4c): auto cleanup kobject_del
[  633.678484] kobject: 'dh' (000000002205ba4c): calling ktype release
[  633.686136] kobject: 'dh': free name
06:24:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:20 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xe03f030000000000, 0x0}, 0x0)

06:24:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023000c0b1a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:20 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:20 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_reiolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70700000000000]}, 0x48)

[  633.706245] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  633.712754] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  633.759401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.768731] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  633.775223] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  633.790342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
06:24:20 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_repolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:20 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:20 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710000000000]}, 0x48)

06:24:20 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023000c121a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:20 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x33fe0, 0x0}, 0x0)

[  633.808368] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  633.825219] kobject: 'loop3' (00000000a3513cfe): kobject_uevent_env
[  633.832858] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  633.845521] kobject: 'loop3' (00000000a3513cfe): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  633.903571] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  633.930681] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
06:24:20 executing program 1:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

[  633.960845] kobject: 'dh' (00000000c5be7638): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  633.969372] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  633.982836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.993518] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  634.010044] kobject: 'dh' (00000000c5be7638): kobject_uevent_env
[  634.021028] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  634.026678] kobject: 'dh' (00000000c5be7638): fill_kobj_path: path = '/fs/gfs2/dh'
[  634.041364] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  634.065727] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  634.072378] gfs2: fsid=dh: Now mounting FS...
[  634.080402] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  634.095776] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  634.126987] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  634.133883] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  634.144972] gfs2: not a GFS2 filesystem
[  634.154822] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  634.175308] gfs2: fsid=dh: can't read superblock
[  634.180129] gfs2: fsid=dh: can't read superblock: -22
[  634.185452] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  634.197202] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  634.203669] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  634.217399] kobject: 'dh' (00000000c5be7638): kobject_cleanup, parent 000000005982070f
[  634.225554] kobject: 'dh' (00000000c5be7638): auto cleanup 'remove' event
[  634.228038] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  634.232995] kobject: 'dh' (00000000c5be7638): kobject_uevent_env
[  634.245175] kobject: 'dh' (00000000c5be7638): fill_kobj_path: path = '/fs/gfs2/dh'
[  634.247811] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  634.253198] kobject: 'dh' (00000000c5be7638): auto cleanup kobject_del
[  634.276508] kobject: 'dh' (00000000c5be7638): calling ktype release
[  634.290972] kobject: 'dh': free name
[  634.326094] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  634.332753] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
06:24:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000]}, 0x48)

06:24:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023000c041a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:21 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa843029100090039000900230014001a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:21 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x34000, 0x0}, 0x0)

[  634.409366] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  634.435691] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
06:24:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000]}, 0x48)

[  634.460622] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  634.481639] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  634.489403] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  634.516049] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  634.519971] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  634.538385] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  634.552753] kobject: 'rx-0' (000000000d50caee): kobject_cleanup, parent 00000000168a8503
[  634.568613] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  634.575211] kobject: 'rx-0' (000000000d50caee): auto cleanup 'remove' event
[  634.577394] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  634.593175] kobject: 'rx-0' (000000000d50caee): kobject_uevent_env
[  634.600325] kobject: 'rx-0' (000000000d50caee): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0'
[  634.611129] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  634.615418] kobject: 'rx-0' (000000000d50caee): auto cleanup kobject_del
[  634.617802] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  634.624677] kobject: 'rx-0' (000000000d50caee): calling ktype release
[  634.634706] kobject: 'dh' (00000000e4ff70f3): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  634.650314] kobject: 'rx-0': free name
[  634.651203] kobject: 'dh' (00000000e4ff70f3): kobject_uevent_env
[  634.660168] kobject: 'tx-0' (0000000064359490): kobject_cleanup, parent 00000000168a8503
[  634.660751] kobject: 'dh' (00000000e4ff70f3): fill_kobj_path: path = '/fs/gfs2/dh'
[  634.676561] kobject: 'tx-0' (0000000064359490): auto cleanup 'remove' event
[  634.679585] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  634.684570] kobject: 'tx-0' (0000000064359490): kobject_uevent_env
[  634.693377] gfs2: fsid=dh: Now mounting FS...
[  634.697438] kobject: 'tx-0' (0000000064359490): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0'
[  634.704093] gfs2: not a GFS2 filesystem
[  634.712033] kobject: 'tx-0' (0000000064359490): auto cleanup kobject_del
[  634.712079] kobject: 'tx-0' (0000000064359490): calling ktype release
[  634.712084] kobject: 'tx-0': free name
[  634.712103] kobject: 'queues' (00000000168a8503): kobject_cleanup, parent           (null)
[  634.712110] kobject: 'queues' (00000000168a8503): calling ktype release
[  634.712117] kobject: 'queues' (00000000168a8503): kset_release
[  634.712128] kobject: 'queues': free name
[  634.712466] kobject: 'syz_tun' (000000002fd91b14): kobject_uevent_env
[  634.716958] gfs2: fsid=dh: can't read superblock
[  634.723278] kobject: 'syz_tun' (000000002fd91b14): fill_kobj_path: path = '/devices/virtual/net/syz_tun'
[  634.781383] gfs2: fsid=dh: can't read superblock: -22
[  634.782185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  634.790959] kobject: 'dh' (00000000e4ff70f3): kobject_cleanup, parent 000000005982070f
[  634.801369] kobject: 'dh' (00000000e4ff70f3): auto cleanup 'remove' event
[  634.808494] kobject: 'dh' (00000000e4ff70f3): kobject_uevent_env
[  634.814653] kobject: 'dh' (00000000e4ff70f3): fill_kobj_path: path = '/fs/gfs2/dh'
[  634.815423] kobject: 'syz_tun' (000000002fd91b14): kobject_cleanup, parent           (null)
[  634.822897] kobject: 'dh' (00000000e4ff70f3): auto cleanup kobject_del
[  634.832483] kobject: 'syz_tun' (000000002fd91b14): calling ktype release
[  634.838506] kobject: 'dh' (00000000e4ff70f3): calling ktype release
[  634.845044] kobject: 'syz_tun': free name
[  634.851266] kobject: 'dh': free name
[  634.859681] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  634.866274] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
06:24:21 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="9d000000a42dd791b848f4f5e3782a961d1db344659b1347a4202e9efeb1582af923e0bc76b2799cb070c44f4e3d24f326012a7446cef3f363dd12f6ecca4f646ff64be8721497fd7a158d0094731c9d72868ef35c184062c6a10dcde9ea1f1301740df76eb9c5dd69487de456335fb6dac9b4f893dd66deb4e30af92fe5aee41a223ad012b954699eb9099cbd252023"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_reuolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x214, 0xfffffffffffffffb)
ioctl(0xffffffffffffffff, 0x0, 0x0)

06:24:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300]}, 0x48)

06:24:21 executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910009003900090023000cfc1a00000005000500fe0b0b000000c78b80082314e9030b9d566885b167320b00070038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0)

06:24:21 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0xc03e000000000000, 0x0}, 0x0)

06:24:21 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, 0x0, 0x0)

[  634.926561] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
06:24:21 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000]}, 0x48)

[  634.967027] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  635.008559] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  635.019586] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
06:24:22 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

06:24:22 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x803e0000, 0x0}, 0x0)

06:24:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48)

[  635.058981] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  635.092025] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
06:24:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]})
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)

06:24:22 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

[  635.131709] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  635.150103] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  635.159871] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
06:24:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000005503000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d6405000000000065040400010000003404000001000000b7050000000000006a0a00fe00000000850000005a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff]}, 0x48)

[  635.177437] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  635.195420] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  635.213021] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  635.242325] IPVS: ftp: loaded support on port[0] = 21
[  635.242938] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  635.260703] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  635.265148] kobject: 'dh' (00000000f7eb04b7): kobject_add_internal: parent: 'gfs2', set: 'gfs2'
[  635.283869] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  635.300508] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  635.321406] kobject: 'dh' (00000000f7eb04b7): kobject_uevent_env
[  635.326843] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  635.335427] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  635.338375] kobject: 'dh' (00000000f7eb04b7): fill_kobj_path: path = '/fs/gfs2/dh'
[  635.364622] kobject: 'loop2' (0000000026abe737): kobject_uevent_env
[  635.366179] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh"
[  635.378322] gfs2: fsid=dh: Now mounting FS...
[  635.378964] kobject: 'loop2' (0000000026abe737): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  635.388274] gfs2: not a GFS2 filesystem
[  635.392972] kobject: 'loop1' (00000000a68d12bb): kobject_uevent_env
[  635.403444] kobject: 'loop1' (00000000a68d12bb): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  635.408003] gfs2: fsid=dh: can't read superblock
[  635.417826] kobject: 'loop0' (00000000ca839988): kobject_uevent_env
[  635.430069] kobject: 'loop0' (00000000ca839988): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  635.433485] gfs2: fsid=dh: can't read superblock: -22
[  635.501921] kobject: 'rx-0' (0000000090948c30): kobject_cleanup, parent 000000006cfd230c
[  635.536675] kobject: 'rx-0' (0000000090948c30): auto cleanup 'remove' event
[  635.540030] kobject: 'dh' (00000000f7eb04b7): kobject_cleanup, parent 000000005982070f
[  635.552955] kobject: 'dh' (00000000f7eb04b7): auto cleanup 'remove' event
[  635.555073] kobject: 'rx-0' (0000000090948c30): kobject_uevent_env
[  635.560498] kobject: 'dh' (00000000f7eb04b7): kobject_uevent_env
[  635.566521] kobject: 'rx-0' (0000000090948c30): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.573547] kobject: 'dh' (00000000f7eb04b7): fill_kobj_path: path = '/fs/gfs2/dh'
[  635.583462] kobject: 'rx-0' (0000000090948c30): auto cleanup kobject_del
[  635.598097] kobject: 'rx-0' (0000000090948c30): calling ktype release
[  635.604763] kobject: 'dh' (00000000f7eb04b7): auto cleanup kobject_del
[  635.606583] kobject: 'rx-0': free name
[  635.613080] kobject: 'dh' (00000000f7eb04b7): calling ktype release
[  635.615723] kobject: 'tx-0' (00000000a07daf9f): kobject_cleanup, parent 000000006cfd230c
[  635.622746] kobject: 'dh': free name
[  635.630449] kobject: 'tx-0' (00000000a07daf9f): auto cleanup 'remove' event
[  635.641341] kobject: 'tx-0' (00000000a07daf9f): kobject_uevent_env
[  635.647932] kobject: 'tx-0' (00000000a07daf9f): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.658150] kobject: 'tx-0' (00000000a07daf9f): auto cleanup kobject_del
[  635.665028] kobject: 'tx-0' (00000000a07daf9f): calling ktype release
[  635.672237] kobject: 'tx-0': free name
[  635.676277] kobject: 'queues' (000000006cfd230c): kobject_cleanup, parent           (null)
[  635.684754] kobject: 'queues' (000000006cfd230c): calling ktype release
[  635.686029] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  635.691575] kobject: 'queues' (000000006cfd230c): kset_release
[  635.698913] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  635.703964] kobject: 'queues': free name
[  635.704313] kobject: 'ip6gre0' (0000000044dce566): kobject_uevent_env
[  635.704323] kobject: 'ip6gre0' (0000000044dce566): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.705451] kobject: 'rx-0' (00000000c7cd1c57): kobject_cleanup, parent 00000000018c48b0
[  635.719345] kobject: 'loop5' (00000000fa4dcf5a): kobject_uevent_env
[  635.735278] kobject: 'rx-0' (00000000c7cd1c57): auto cleanup 'remove' event
[  635.760091] kobject: 'rx-0' (00000000c7cd1c57): kobject_uevent_env
[  635.771252] kobject: 'loop5' (00000000fa4dcf5a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  635.773091] kobject: 'rx-0' (00000000c7cd1c57): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.791211] kobject: 'rx-0' (00000000c7cd1c57): auto cleanup kobject_del
[  635.798145] kobject: 'rx-0' (00000000c7cd1c57): calling ktype release
[  635.804724] kobject: 'rx-0': free name
[  635.814492] kobject: 'tx-0' (000000006b9cef20): kobject_cleanup, parent 00000000018c48b0
[  635.822844] kobject: 'tx-0' (000000006b9cef20): auto cleanup 'remove' event
[  635.830071] kobject: 'tx-0' (000000006b9cef20): kobject_uevent_env
[  635.836422] kobject: 'tx-0' (000000006b9cef20): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.846504] kobject: 'tx-0' (000000006b9cef20): auto cleanup kobject_del
[  635.853371] kobject: 'tx-0' (000000006b9cef20): calling ktype release
[  635.859975] kobject: 'tx-0': free name
[  635.863896] kobject: 'queues' (00000000018c48b0): kobject_cleanup, parent           (null)
[  635.872380] kobject: 'queues' (00000000018c48b0): calling ktype release
[  635.879164] kobject: 'queues' (00000000018c48b0): kset_release
[  635.885127] kobject: 'queues': free name
[  635.889515] kobject: 'ip6gretap0' (00000000b7c2e3bb): kobject_uevent_env
[  635.896404] kobject: 'ip6gretap0' (00000000b7c2e3bb): kobject_uevent_env: uevent_suppress caused the event to drop!
[  635.907225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  635.913910] kobject: 'lo' (00000000147ea680): kobject_add_internal: parent: 'net', set: 'devices'
[  635.924082] kobject: 'lo' (00000000147ea680): kobject_uevent_env
[  635.930311] kobject: 'lo' (00000000147ea680): fill_kobj_path: path = '/devices/virtual/net/lo'
[  635.939365] kobject: 'queues' (000000006a1d273f): kobject_add_internal: parent: 'lo', set: '<NULL>'
[  635.948773] kobject: 'queues' (000000006a1d273f): kobject_uevent_env
[  635.955442] kobject: 'queues' (000000006a1d273f): kobject_uevent_env: filter function caused the event to drop!
[  635.965858] kobject: 'rx-0' (000000003cb2fbd6): kobject_add_internal: parent: 'queues', set: 'queues'
[  635.975560] kobject: 'rx-0' (000000003cb2fbd6): kobject_uevent_env
[  635.979879] kobject: 'loop4' (0000000097d574aa): kobject_uevent_env
[  635.981924] kobject: 'rx-0' (000000003cb2fbd6): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0'
[  635.988543] kobject: 'loop4' (0000000097d574aa): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  635.998595] kobject: 'tx-0' (000000006cea7af4): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.017712] kobject: 'tx-0' (000000006cea7af4): kobject_uevent_env
[  636.024077] kobject: 'tx-0' (000000006cea7af4): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0'
[  636.034814] kobject: 'ip6gre0' (0000000044dce566): kobject_cleanup, parent           (null)
[  636.034951] kobject: 'tunl0' (0000000086e3d195): kobject_add_internal: parent: 'net', set: 'devices'
[  636.043734] kobject: 'ip6gre0' (0000000044dce566): auto cleanup 'remove' event
[  636.053423] kobject: 'tunl0' (0000000086e3d195): kobject_uevent_env
[  636.060676] kobject: 'ip6gre0' (0000000044dce566): kobject_uevent_env
[  636.066590] kobject: 'tunl0' (0000000086e3d195): fill_kobj_path: path = '/devices/virtual/net/tunl0'
[  636.066680] kobject: 'queues' (0000000053210937): kobject_add_internal: parent: 'tunl0', set: '<NULL>'
[  636.073578] kobject: 'ip6gre0' (0000000044dce566): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.082508] kobject: 'queues' (0000000053210937): kobject_uevent_env
[  636.082517] kobject: 'queues' (0000000053210937): kobject_uevent_env: filter function caused the event to drop!
[  636.082542] kobject: 'rx-0' (00000000af6d18dd): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.092335] kobject: 'ip6gre0' (0000000044dce566): calling ktype release
[  636.102417] kobject: 'rx-0' (00000000af6d18dd): kobject_uevent_env
[  636.109537] kobject: 'ip6gre0': free name
[  636.119170] kobject: 'rx-0' (00000000af6d18dd): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0'
[  636.156337] kobject: 'tx-0' (0000000092bc1952): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.165885] kobject: 'tx-0' (0000000092bc1952): kobject_uevent_env
[  636.172249] kobject: 'tx-0' (0000000092bc1952): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0'
[  636.183241] kobject: 'gre0' (00000000aab87b04): kobject_add_internal: parent: 'net', set: 'devices'
[  636.193077] kobject: 'gre0' (00000000aab87b04): kobject_uevent_env
[  636.199483] kobject: 'gre0' (00000000aab87b04): fill_kobj_path: path = '/devices/virtual/net/gre0'
[  636.208720] kobject: 'queues' (00000000768bc610): kobject_add_internal: parent: 'gre0', set: '<NULL>'
[  636.218133] kobject: 'queues' (00000000768bc610): kobject_uevent_env
[  636.224657] kobject: 'queues' (00000000768bc610): kobject_uevent_env: filter function caused the event to drop!
[  636.234938] kobject: 'rx-0' (00000000ffa4c40f): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.244484] kobject: 'rx-0' (00000000ffa4c40f): kobject_uevent_env
[  636.250854] kobject: 'rx-0' (00000000ffa4c40f): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0'
[  636.261112] kobject: 'tx-0' (00000000051eae32): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.270646] kobject: 'tx-0' (00000000051eae32): kobject_uevent_env
[  636.277018] kobject: 'tx-0' (00000000051eae32): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0'
[  636.287677] kobject: 'ip6gretap0' (00000000b7c2e3bb): kobject_cleanup, parent           (null)
[  636.287801] kobject: 'gretap0' (0000000041e0d13e): kobject_add_internal: parent: 'net', set: 'devices'
[  636.296792] kobject: 'ip6gretap0' (00000000b7c2e3bb): auto cleanup 'remove' event
[  636.306854] kobject: 'gretap0' (0000000041e0d13e): kobject_uevent_env
[  636.314628] kobject: 'ip6gretap0' (00000000b7c2e3bb): kobject_uevent_env
[  636.320630] kobject: 'gretap0' (0000000041e0d13e): fill_kobj_path: path = '/devices/virtual/net/gretap0'
[  636.327919] kobject: 'ip6gretap0' (00000000b7c2e3bb): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.337210] kobject: 'queues' (00000000dfa07a21): kobject_add_internal: parent: 'gretap0', set: '<NULL>'
[  636.348124] kobject: 'ip6gretap0' (00000000b7c2e3bb): calling ktype release
[  636.357482] kobject: 'queues' (00000000dfa07a21): kobject_uevent_env
[  636.364841] kobject: 'ip6gretap0': free name
[  636.371088] kobject: 'queues' (00000000dfa07a21): kobject_uevent_env: filter function caused the event to drop!
[  636.371119] kobject: 'rx-0' (00000000f49825fb): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.371195] kobject: 'rx-0' (00000000f49825fb): kobject_uevent_env
[  636.401516] kobject: 'rx-0' (00000000f49825fb): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0'
[  636.412025] kobject: 'tx-0' (00000000a24ea224): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.421538] kobject: 'tx-0' (00000000a24ea224): kobject_uevent_env
[  636.427909] kobject: 'tx-0' (00000000a24ea224): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0'
[  636.439067] kobject: 'erspan0' (0000000038174cb7): kobject_add_internal: parent: 'net', set: 'devices'
[  636.449201] kobject: 'erspan0' (0000000038174cb7): kobject_uevent_env
[  636.455843] kobject: 'erspan0' (0000000038174cb7): fill_kobj_path: path = '/devices/virtual/net/erspan0'
[  636.465570] kobject: 'queues' (00000000c21d6cf6): kobject_add_internal: parent: 'erspan0', set: '<NULL>'
[  636.475311] kobject: 'queues' (00000000c21d6cf6): kobject_uevent_env
[  636.481822] kobject: 'queues' (00000000c21d6cf6): kobject_uevent_env: filter function caused the event to drop!
[  636.492217] kobject: 'rx-0' (00000000397011e4): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.501742] kobject: 'rx-0' (00000000397011e4): kobject_uevent_env
[  636.508133] kobject: 'rx-0' (00000000397011e4): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0'
[  636.518663] kobject: 'tx-0' (00000000b381e0fb): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.528216] kobject: 'tx-0' (00000000b381e0fb): kobject_uevent_env
[  636.534562] kobject: 'tx-0' (00000000b381e0fb): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0'
[  636.593326] kobject: 'rx-0' (000000008905fe65): kobject_cleanup, parent 00000000f741f290
[  636.601640] kobject: 'rx-0' (000000008905fe65): auto cleanup 'remove' event
[  636.608886] kobject: 'rx-0' (000000008905fe65): kobject_uevent_env
[  636.615207] kobject: 'rx-0' (000000008905fe65): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.625384] kobject: 'rx-0' (000000008905fe65): auto cleanup kobject_del
[  636.632253] kobject: 'rx-0' (000000008905fe65): calling ktype release
[  636.638919] kobject: 'rx-0': free name
[  636.642883] kobject: 'tx-0' (0000000034bc040a): kobject_cleanup, parent 00000000f741f290
[  636.651322] kobject: 'tx-0' (0000000034bc040a): auto cleanup 'remove' event
[  636.658490] kobject: 'tx-0' (0000000034bc040a): kobject_uevent_env
[  636.664826] kobject: 'tx-0' (0000000034bc040a): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.674924] kobject: 'tx-0' (0000000034bc040a): auto cleanup kobject_del
[  636.681928] kobject: 'tx-0' (0000000034bc040a): calling ktype release
[  636.688537] kobject: 'tx-0': free name
[  636.692442] kobject: 'queues' (00000000f741f290): kobject_cleanup, parent           (null)
[  636.700888] kobject: 'queues' (00000000f741f290): calling ktype release
[  636.707682] kobject: 'queues' (00000000f741f290): kset_release
[  636.713647] kobject: 'queues': free name
[  636.718059] kobject: 'ip6tnl0' (0000000001c83f38): kobject_uevent_env
[  636.724650] kobject: 'ip6tnl0' (0000000001c83f38): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.735301] kobject: 'ip_vti0' (00000000d0b7fb49): kobject_add_internal: parent: 'net', set: 'devices'
[  636.745535] kobject: 'ip_vti0' (00000000d0b7fb49): kobject_uevent_env
[  636.752151] kobject: 'ip_vti0' (00000000d0b7fb49): fill_kobj_path: path = '/devices/virtual/net/ip_vti0'
[  636.761937] kobject: 'queues' (00000000dbce1aa1): kobject_add_internal: parent: 'ip_vti0', set: '<NULL>'
[  636.771751] kobject: 'queues' (00000000dbce1aa1): kobject_uevent_env
[  636.778350] kobject: 'queues' (00000000dbce1aa1): kobject_uevent_env: filter function caused the event to drop!
[  636.788701] kobject: 'rx-0' (00000000bafea16a): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.798246] kobject: 'rx-0' (00000000bafea16a): kobject_uevent_env
[  636.804698] kobject: 'rx-0' (00000000bafea16a): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0'
[  636.815469] kobject: 'tx-0' (0000000001b3b581): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.825094] kobject: 'tx-0' (0000000001b3b581): kobject_uevent_env
[  636.831597] kobject: 'tx-0' (0000000001b3b581): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0'
[  636.842631] kobject: 'ip6_vti0' (00000000cf39d9b4): kobject_add_internal: parent: 'net', set: 'devices'
[  636.852824] kobject: 'ip6_vti0' (00000000cf39d9b4): kobject_uevent_env
[  636.859568] kobject: 'ip6_vti0' (00000000cf39d9b4): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0'
[  636.869520] kobject: 'queues' (00000000e7e2799f): kobject_add_internal: parent: 'ip6_vti0', set: '<NULL>'
[  636.879309] kobject: 'queues' (00000000e7e2799f): kobject_uevent_env
[  636.885888] kobject: 'queues' (00000000e7e2799f): kobject_uevent_env: filter function caused the event to drop!
[  636.896190] kobject: 'rx-0' (00000000d85e0957): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.905664] kobject: 'rx-0' (00000000d85e0957): kobject_uevent_env
[  636.912018] kobject: 'rx-0' (00000000d85e0957): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0'
[  636.922646] kobject: 'tx-0' (0000000097daf595): kobject_add_internal: parent: 'queues', set: 'queues'
[  636.932147] kobject: 'tx-0' (0000000097daf595): kobject_uevent_env
[  636.938522] kobject: 'tx-0' (0000000097daf595): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0'
[  636.949716] kobject: 'ip6tnl0' (0000000001c83f38): kobject_cleanup, parent           (null)
[  636.949789] kobject: 'sit0' (00000000ec06e16a): kobject_add_internal: parent: 'net', set: 'devices'
[  636.958766] kobject: 'ip6tnl0' (0000000001c83f38): auto cleanup 'remove' event
[  636.968322] kobject: 'sit0' (00000000ec06e16a): kobject_uevent_env
[  636.975290] kobject: 'ip6tnl0' (0000000001c83f38): kobject_uevent_env
[  636.981327] kobject: 'sit0' (00000000ec06e16a): fill_kobj_path: path = '/devices/virtual/net/sit0'
[  636.988408] kobject: 'ip6tnl0' (0000000001c83f38): kobject_uevent_env: uevent_suppress caused the event to drop!
[  636.997132] kobject: 'queues' (0000000033b7749b): kobject_add_internal: parent: 'sit0', set: '<NULL>'
[  637.007737] kobject: 'ip6tnl0' (0000000001c83f38): calling ktype release
[  637.016808] kobject: 'queues' (0000000033b7749b): kobject_uevent_env
[  637.023883] kobject: 'ip6tnl0': free name
[  637.030123] kobject: 'queues' (0000000033b7749b): kobject_uevent_env: filter function caused the event to drop!
[  637.030153] kobject: 'rx-0' (0000000070f1c485): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.054011] kobject: 'rx-0' (0000000070f1c485): kobject_uevent_env
[  637.060386] kobject: 'rx-0' (0000000070f1c485): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0'
[  637.070632] kobject: 'tx-0' (00000000f0a7c98b): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.080213] kobject: 'tx-0' (00000000f0a7c98b): kobject_uevent_env
[  637.086638] kobject: 'tx-0' (00000000f0a7c98b): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0'
[  637.145151] kobject: 'rx-0' (000000000cbbc893): kobject_cleanup, parent 000000006a1d30a8
[  637.153481] kobject: 'rx-0' (000000000cbbc893): auto cleanup 'remove' event
[  637.160673] kobject: 'rx-0' (000000000cbbc893): kobject_uevent_env
[  637.167026] kobject: 'rx-0' (000000000cbbc893): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.177128] kobject: 'rx-0' (000000000cbbc893): auto cleanup kobject_del
[  637.184003] kobject: 'rx-0' (000000000cbbc893): calling ktype release
[  637.190630] kobject: 'rx-0': free name
[  637.194581] kobject: 'tx-0' (00000000f91c88bf): kobject_cleanup, parent 000000006a1d30a8
[  637.202859] kobject: 'tx-0' (00000000f91c88bf): auto cleanup 'remove' event
[  637.210012] kobject: 'tx-0' (00000000f91c88bf): kobject_uevent_env
[  637.216357] kobject: 'tx-0' (00000000f91c88bf): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.226556] kobject: 'tx-0' (00000000f91c88bf): auto cleanup kobject_del
[  637.233428] kobject: 'tx-0' (00000000f91c88bf): calling ktype release
[  637.240051] kobject: 'tx-0': free name
[  637.243956] kobject: 'queues' (000000006a1d30a8): kobject_cleanup, parent           (null)
[  637.252408] kobject: 'queues' (000000006a1d30a8): calling ktype release
[  637.259212] kobject: 'queues' (000000006a1d30a8): kset_release
[  637.265184] kobject: 'queues': free name
[  637.269675] kobject: 'sit0' (00000000d58d54a7): kobject_uevent_env
[  637.276053] kobject: 'sit0' (00000000d58d54a7): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.286701] kobject: 'ip6tnl0' (00000000e8bc95d6): kobject_add_internal: parent: 'net', set: 'devices'
[  637.297041] kobject: 'ip6tnl0' (00000000e8bc95d6): kobject_uevent_env
[  637.303715] kobject: 'ip6tnl0' (00000000e8bc95d6): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0'
[  637.313537] kobject: 'queues' (000000004d42ee7c): kobject_add_internal: parent: 'ip6tnl0', set: '<NULL>'
[  637.323314] kobject: 'queues' (000000004d42ee7c): kobject_uevent_env
[  637.329907] kobject: 'queues' (000000004d42ee7c): kobject_uevent_env: filter function caused the event to drop!
[  637.340230] kobject: 'rx-0' (0000000095aa6691): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.349848] kobject: 'rx-0' (0000000095aa6691): kobject_uevent_env
[  637.356304] kobject: 'rx-0' (0000000095aa6691): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0'
[  637.366884] kobject: 'tx-0' (000000007bae757a): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.376573] kobject: 'tx-0' (000000007bae757a): kobject_uevent_env
[  637.383027] kobject: 'tx-0' (000000007bae757a): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0'
[  637.394123] kobject: 'sit0' (00000000d58d54a7): kobject_cleanup, parent           (null)
[  637.394232] kobject: 'ip6gre0' (0000000038c0e5fd): kobject_add_internal: parent: 'net', set: 'devices'
[  637.402478] kobject: 'sit0' (00000000d58d54a7): auto cleanup 'remove' event
[  637.412824] kobject: 'ip6gre0' (0000000038c0e5fd): kobject_uevent_env
[  637.419458] kobject: 'sit0' (00000000d58d54a7): kobject_uevent_env
[  637.426218] kobject: 'ip6gre0' (0000000038c0e5fd): fill_kobj_path: path = '/devices/virtual/net/ip6gre0'
[  637.432465] kobject: 'sit0' (00000000d58d54a7): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.441939] kobject: 'queues' (00000000e840ce2f): kobject_add_internal: parent: 'ip6gre0', set: '<NULL>'
[  637.452110] kobject: 'sit0' (00000000d58d54a7): calling ktype release
[  637.461583] kobject: 'queues' (00000000e840ce2f): kobject_uevent_env
[  637.468241] kobject: 'sit0': free name
[  637.474812] kobject: 'queues' (00000000e840ce2f): kobject_uevent_env: filter function caused the event to drop!
[  637.489664] kobject: 'rx-0' (000000006a185534): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.499233] kobject: 'rx-0' (000000006a185534): kobject_uevent_env
[  637.505714] kobject: 'rx-0' (000000006a185534): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0'
[  637.516319] kobject: 'tx-0' (00000000a322e7cd): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.526009] kobject: 'tx-0' (00000000a322e7cd): kobject_uevent_env
[  637.532428] kobject: 'tx-0' (00000000a322e7cd): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0'
[  637.593793] kobject: 'rx-0' (00000000bfa3ea3a): kobject_cleanup, parent 00000000a168d29c
[  637.602110] kobject: 'rx-0' (00000000bfa3ea3a): auto cleanup 'remove' event
[  637.609296] kobject: 'rx-0' (00000000bfa3ea3a): kobject_uevent_env
[  637.615642] kobject: 'rx-0' (00000000bfa3ea3a): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.625789] kobject: 'rx-0' (00000000bfa3ea3a): auto cleanup kobject_del
[  637.632677] kobject: 'rx-0' (00000000bfa3ea3a): calling ktype release
[  637.639307] kobject: 'rx-0': free name
[  637.643248] kobject: 'tx-0' (0000000014933edb): kobject_cleanup, parent 00000000a168d29c
[  637.651606] kobject: 'tx-0' (0000000014933edb): auto cleanup 'remove' event
[  637.658805] kobject: 'tx-0' (0000000014933edb): kobject_uevent_env
[  637.665117] kobject: 'tx-0' (0000000014933edb): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.676009] kobject: 'tx-0' (0000000014933edb): auto cleanup kobject_del
[  637.682936] kobject: 'tx-0' (0000000014933edb): calling ktype release
[  637.689568] kobject: 'tx-0': free name
[  637.693593] kobject: 'queues' (00000000a168d29c): kobject_cleanup, parent           (null)
[  637.702297] kobject: 'queues' (00000000a168d29c): calling ktype release
[  637.709111] kobject: 'queues' (00000000a168d29c): kset_release
[  637.715104] kobject: 'queues': free name
[  637.719476] kobject: 'ip6_vti0' (00000000067b1489): kobject_uevent_env
[  637.726178] kobject: 'ip6_vti0' (00000000067b1489): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.736959] kobject: 'syz_tun' (000000003209c56b): kobject_add_internal: parent: 'net', set: 'devices'
[  637.746929] kobject: 'syz_tun' (000000003209c56b): kobject_uevent_env
[  637.753533] kobject: 'syz_tun' (000000003209c56b): fill_kobj_path: path = '/devices/virtual/net/syz_tun'
[  637.763279] kobject: 'queues' (000000002f25d558): kobject_add_internal: parent: 'syz_tun', set: '<NULL>'
[  637.773092] kobject: 'queues' (000000002f25d558): kobject_uevent_env
[  637.779614] kobject: 'queues' (000000002f25d558): kobject_uevent_env: filter function caused the event to drop!
[  637.789899] kobject: 'rx-0' (00000000c2816d46): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.799373] kobject: 'rx-0' (00000000c2816d46): kobject_uevent_env
[  637.805746] kobject: 'rx-0' (00000000c2816d46): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0'
[  637.816261] kobject: 'tx-0' (00000000f4ea47ee): kobject_add_internal: parent: 'queues', set: 'queues'
[  637.825852] kobject: 'tx-0' (00000000f4ea47ee): kobject_uevent_env
[  637.832217] kobject: 'tx-0' (00000000f4ea47ee): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0'
[  637.865388] kobject: 'ip6_vti0' (00000000067b1489): kobject_cleanup, parent           (null)
[  637.874029] kobject: 'ip6_vti0' (00000000067b1489): auto cleanup 'remove' event
[  637.881917] kobject: 'ip6_vti0' (00000000067b1489): kobject_uevent_env
[  637.889031] kobject: 'ip6_vti0' (00000000067b1489): kobject_uevent_env: uevent_suppress caused the event to drop!
[  637.899827] kobject: 'ip6_vti0' (00000000067b1489): calling ktype release
[  637.907444] kobject: 'ip6_vti0': free name
[  637.971742] kobject: 'rx-0' (000000005b0623d0): kobject_cleanup, parent 00000000082a4079
[  637.980035] kobject: 'rx-0' (000000005b0623d0): auto cleanup 'remove' event
[  637.987197] kobject: 'rx-0' (000000005b0623d0): kobject_uevent_env
[  637.993625] kobject: 'rx-0' (000000005b0623d0): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.003823] kobject: 'rx-0' (000000005b0623d0): auto cleanup kobject_del
[  638.010811] kobject: 'rx-0' (000000005b0623d0): calling ktype release
[  638.017540] kobject: 'rx-0': free name
[  638.021534] kobject: 'tx-0' (000000003ffbe996): kobject_cleanup, parent 00000000082a4079
[  638.029914] kobject: 'tx-0' (000000003ffbe996): auto cleanup 'remove' event
[  638.037133] kobject: 'tx-0' (000000003ffbe996): kobject_uevent_env
[  638.043515] kobject: 'tx-0' (000000003ffbe996): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.053666] kobject: 'tx-0' (000000003ffbe996): auto cleanup kobject_del
[  638.060682] kobject: 'tx-0' (000000003ffbe996): calling ktype release
[  638.067362] kobject: 'tx-0': free name
[  638.071323] kobject: 'queues' (00000000082a4079): kobject_cleanup, parent           (null)
[  638.080103] kobject: 'queues' (00000000082a4079): calling ktype release
[  638.086985] kobject: 'queues' (00000000082a4079): kset_release
[  638.093018] kobject: 'queues': free name
[  638.097564] kobject: 'ip_vti0' (00000000c01a5ea3): kobject_uevent_env
[  638.104208] kobject: 'ip_vti0' (00000000c01a5ea3): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.145416] kobject: 'ip_vti0' (00000000c01a5ea3): kobject_cleanup, parent           (null)
[  638.153959] kobject: 'ip_vti0' (00000000c01a5ea3): auto cleanup 'remove' event
[  638.161845] kobject: 'ip_vti0' (00000000c01a5ea3): kobject_uevent_env
[  638.170018] kobject: 'ip_vti0' (00000000c01a5ea3): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.180904] kobject: 'ip_vti0' (00000000c01a5ea3): calling ktype release
[  638.188320] kobject: 'ip_vti0': free name
[  638.250815] kobject: 'rx-0' (00000000904f34ba): kobject_cleanup, parent 000000000250ace8
[  638.259148] kobject: 'rx-0' (00000000904f34ba): auto cleanup 'remove' event
[  638.266404] kobject: 'rx-0' (00000000904f34ba): kobject_uevent_env
[  638.272823] kobject: 'rx-0' (00000000904f34ba): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.282986] kobject: 'rx-0' (00000000904f34ba): auto cleanup kobject_del
[  638.289932] kobject: 'rx-0' (00000000904f34ba): calling ktype release
[  638.296660] kobject: 'rx-0': free name
[  638.300662] kobject: 'tx-0' (00000000e7b0086a): kobject_cleanup, parent 000000000250ace8
[  638.309033] kobject: 'tx-0' (00000000e7b0086a): auto cleanup 'remove' event
[  638.316379] kobject: 'tx-0' (00000000e7b0086a): kobject_uevent_env
[  638.322764] kobject: 'tx-0' (00000000e7b0086a): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.332918] kobject: 'tx-0' (00000000e7b0086a): auto cleanup kobject_del
[  638.340142] kobject: 'tx-0' (00000000e7b0086a): calling ktype release
[  638.346848] kobject: 'tx-0': free name
[  638.350812] kobject: 'queues' (000000000250ace8): kobject_cleanup, parent           (null)
[  638.359555] kobject: 'queues' (000000000250ace8): calling ktype release
[  638.366442] kobject: 'queues' (000000000250ace8): kset_release
[  638.372473] kobject: 'queues': free name
[  638.376927] kobject: 'erspan0' (0000000075cb2b8d): kobject_uevent_env
[  638.383575] kobject: 'erspan0' (0000000075cb2b8d): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.414497] kobject: 'ip6gretap0' (00000000f335073b): kobject_add_internal: parent: 'net', set: 'devices'
[  638.424881] kobject: 'ip6gretap0' (00000000f335073b): kobject_uevent_env
[  638.431895] kobject: 'ip6gretap0' (00000000f335073b): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0'
[  638.442227] kobject: 'queues' (00000000f8dc3887): kobject_add_internal: parent: 'ip6gretap0', set: '<NULL>'
[  638.452242] kobject: 'queues' (00000000f8dc3887): kobject_uevent_env
[  638.458763] kobject: 'queues' (00000000f8dc3887): kobject_uevent_env: filter function caused the event to drop!
[  638.469054] kobject: 'rx-0' (00000000dfba32cf): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.478493] kobject: 'rx-0' (00000000dfba32cf): kobject_uevent_env
[  638.484837] kobject: 'rx-0' (00000000dfba32cf): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/rx-0'
[  638.495748] kobject: 'tx-0' (000000005866bf46): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.505328] kobject: 'tx-0' (000000005866bf46): kobject_uevent_env
[  638.511685] kobject: 'tx-0' (000000005866bf46): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/tx-0'
[  638.523180] kobject: 'erspan0' (0000000075cb2b8d): kobject_cleanup, parent           (null)
[  638.532074] kobject: 'erspan0' (0000000075cb2b8d): auto cleanup 'remove' event
[  638.539835] kobject: 'erspan0' (0000000075cb2b8d): kobject_uevent_env
[  638.546949] kobject: 'erspan0' (0000000075cb2b8d): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.549007] kobject: 'bridge0' (00000000667ec918): kobject_add_internal: parent: 'net', set: 'devices'
[  638.557727] kobject: 'erspan0' (0000000075cb2b8d): calling ktype release
[  638.567653] kobject: 'bridge0' (00000000667ec918): kobject_uevent_env
[  638.573968] kobject: 'erspan0': free name
[  638.580388] kobject: 'bridge0' (00000000667ec918): fill_kobj_path: path = '/devices/virtual/net/bridge0'
[  638.594297] kobject: 'queues' (0000000041ad519b): kobject_add_internal: parent: 'bridge0', set: '<NULL>'
[  638.604008] kobject: 'queues' (0000000041ad519b): kobject_uevent_env
[  638.610553] kobject: 'queues' (0000000041ad519b): kobject_uevent_env: filter function caused the event to drop!
[  638.620858] kobject: 'rx-0' (00000000b52956b4): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.630466] kobject: 'rx-0' (00000000b52956b4): kobject_uevent_env
[  638.636909] kobject: 'rx-0' (00000000b52956b4): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/rx-0'
[  638.647449] kobject: 'tx-0' (000000005d1c1a17): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.657085] kobject: 'tx-0' (000000005d1c1a17): kobject_uevent_env
[  638.663440] kobject: 'tx-0' (000000005d1c1a17): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/tx-0'
[  638.674870] kobject: 'brif' (00000000cff75986): kobject_add_internal: parent: 'bridge0', set: '<NULL>'
[  638.747125] kobject: 'rx-0' (000000003582e26e): kobject_cleanup, parent 000000008c0e4a44
[  638.755525] kobject: 'rx-0' (000000003582e26e): auto cleanup 'remove' event
[  638.762626] kobject: 'rx-0' (000000003582e26e): kobject_uevent_env
[  638.768973] kobject: 'rx-0' (000000003582e26e): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.779155] kobject: 'rx-0' (000000003582e26e): auto cleanup kobject_del
[  638.786306] kobject: 'rx-0' (000000003582e26e): calling ktype release
[  638.792991] kobject: 'rx-0': free name
[  638.797220] kobject: 'tx-0' (00000000f8aa8f82): kobject_cleanup, parent 000000008c0e4a44
[  638.805546] kobject: 'tx-0' (00000000f8aa8f82): auto cleanup 'remove' event
[  638.812709] kobject: 'tx-0' (00000000f8aa8f82): kobject_uevent_env
[  638.819166] kobject: 'tx-0' (00000000f8aa8f82): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.829309] kobject: 'tx-0' (00000000f8aa8f82): auto cleanup kobject_del
[  638.836261] kobject: 'tx-0' (00000000f8aa8f82): calling ktype release
[  638.842924] kobject: 'tx-0': free name
[  638.846929] kobject: 'queues' (000000008c0e4a44): kobject_cleanup, parent           (null)
[  638.855409] kobject: 'queues' (000000008c0e4a44): calling ktype release
[  638.862232] kobject: 'queues' (000000008c0e4a44): kset_release
[  638.868559] kobject: 'queues': free name
[  638.872960] kobject: 'gretap0' (000000005498ebc5): kobject_uevent_env
[  638.879691] kobject: 'gretap0' (000000005498ebc5): kobject_uevent_env: uevent_suppress caused the event to drop!
[  638.891534] kobject: 'vcan0' (0000000036c06b70): kobject_add_internal: parent: 'net', set: 'devices'
[  638.901593] kobject: 'vcan0' (0000000036c06b70): kobject_uevent_env
[  638.908336] kobject: 'vcan0' (0000000036c06b70): fill_kobj_path: path = '/devices/virtual/net/vcan0'
[  638.917784] kobject: 'queues' (00000000bcc00585): kobject_add_internal: parent: 'vcan0', set: '<NULL>'
[  638.927375] kobject: 'queues' (00000000bcc00585): kobject_uevent_env
[  638.934010] kobject: 'queues' (00000000bcc00585): kobject_uevent_env: filter function caused the event to drop!
[  638.944387] kobject: 'rx-0' (000000000c88bcec): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.954019] kobject: 'rx-0' (000000000c88bcec): kobject_uevent_env
[  638.960534] kobject: 'rx-0' (000000000c88bcec): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/rx-0'
[  638.970952] kobject: 'tx-0' (0000000077b567e6): kobject_add_internal: parent: 'queues', set: 'queues'
[  638.980616] kobject: 'tx-0' (0000000077b567e6): kobject_uevent_env
[  638.987071] kobject: 'tx-0' (0000000077b567e6): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/tx-0'
[  639.015610] kobject: 'bond0' (0000000065b248f2): kobject_add_internal: parent: 'net', set: 'devices'
[  639.025790] kobject: 'bond0' (0000000065b248f2): kobject_uevent_env
[  639.032332] kobject: 'bond0' (0000000065b248f2): fill_kobj_path: path = '/devices/virtual/net/bond0'
[  639.041910] kobject: 'queues' (00000000ec2c1d5a): kobject_add_internal: parent: 'bond0', set: '<NULL>'
[  639.051486] kobject: 'queues' (00000000ec2c1d5a): kobject_uevent_env
[  639.058057] kobject: 'queues' (00000000ec2c1d5a): kobject_uevent_env: filter function caused the event to drop!
[  639.068413] kobject: 'rx-0' (000000002f388094): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.077931] kobject: 'rx-0' (000000002f388094): kobject_uevent_env
[  639.084346] kobject: 'rx-0' (000000002f388094): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-0'
[  639.094804] kobject: 'rx-1' (00000000b0ac9127): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.104341] kobject: 'rx-1' (00000000b0ac9127): kobject_uevent_env
[  639.110773] kobject: 'rx-1' (00000000b0ac9127): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-1'
[  639.121194] kobject: 'rx-2' (000000000e440119): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.130962] kobject: 'rx-2' (000000000e440119): kobject_uevent_env
[  639.137421] kobject: 'rx-2' (000000000e440119): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-2'
[  639.147900] kobject: 'rx-3' (0000000040d9520b): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.157451] kobject: 'rx-3' (0000000040d9520b): kobject_uevent_env
[  639.163924] kobject: 'rx-3' (0000000040d9520b): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-3'
[  639.174379] kobject: 'rx-4' (0000000071277b5e): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.183900] kobject: 'rx-4' (0000000071277b5e): kobject_uevent_env
[  639.190351] kobject: 'rx-4' (0000000071277b5e): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-4'
[  639.200767] kobject: 'rx-5' (0000000062168ee4): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.210302] kobject: 'rx-5' (0000000062168ee4): kobject_uevent_env
[  639.216729] kobject: 'rx-5' (0000000062168ee4): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-5'
[  639.227195] kobject: 'rx-6' (0000000024d3e9d5): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.236720] kobject: 'rx-6' (0000000024d3e9d5): kobject_uevent_env
[  639.243094] kobject: 'rx-6' (0000000024d3e9d5): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-6'
[  639.253507] kobject: 'rx-7' (000000000d94de82): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.263259] kobject: 'rx-7' (000000000d94de82): kobject_uevent_env
[  639.269709] kobject: 'rx-7' (000000000d94de82): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-7'
[  639.280189] kobject: 'rx-8' (000000006386db4e): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.289702] kobject: 'rx-8' (000000006386db4e): kobject_uevent_env
[  639.296116] kobject: 'rx-8' (000000006386db4e): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-8'
[  639.306516] kobject: 'rx-9' (00000000f761dfe1): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.316034] kobject: 'rx-9' (00000000f761dfe1): kobject_uevent_env
[  639.322435] kobject: 'rx-9' (00000000f761dfe1): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-9'
[  639.332872] kobject: 'rx-10' (00000000ae9ba6db): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.342491] kobject: 'rx-10' (00000000ae9ba6db): kobject_uevent_env
[  639.349004] kobject: 'rx-10' (00000000ae9ba6db): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-10'
[  639.359707] kobject: 'rx-11' (0000000022430133): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.369314] kobject: 'rx-11' (0000000022430133): kobject_uevent_env
[  639.375842] kobject: 'rx-11' (0000000022430133): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-11'
[  639.386684] kobject: 'rx-12' (000000005fd643ca): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.396337] kobject: 'rx-12' (000000005fd643ca): kobject_uevent_env
[  639.402810] kobject: 'rx-12' (000000005fd643ca): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-12'
[  639.413412] kobject: 'rx-13' (00000000976da3d6): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.422998] kobject: 'rx-13' (00000000976da3d6): kobject_uevent_env
[  639.429596] kobject: 'rx-13' (00000000976da3d6): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-13'
[  639.440234] kobject: 'rx-14' (000000001f131aaf): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.449847] kobject: 'rx-14' (000000001f131aaf): kobject_uevent_env
[  639.456370] kobject: 'rx-14' (000000001f131aaf): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-14'
[  639.466971] kobject: 'rx-15' (00000000d559dd41): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.476588] kobject: 'rx-15' (00000000d559dd41): kobject_uevent_env
[  639.483064] kobject: 'rx-15' (00000000d559dd41): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-15'
[  639.493656] kobject: 'tx-0' (0000000058a0bb59): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.503305] kobject: 'tx-0' (0000000058a0bb59): kobject_uevent_env
[  639.509804] kobject: 'tx-0' (0000000058a0bb59): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-0'
[  639.520459] kobject: 'tx-1' (00000000d8a66832): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.530061] kobject: 'tx-1' (00000000d8a66832): kobject_uevent_env
[  639.536547] kobject: 'tx-1' (00000000d8a66832): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-1'
[  639.546936] kobject: 'tx-2' (00000000f18edddc): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.556514] kobject: 'tx-2' (00000000f18edddc): kobject_uevent_env
[  639.562948] kobject: 'tx-2' (00000000f18edddc): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-2'
[  639.573364] kobject: 'tx-3' (00000000803de2ec): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.582940] kobject: 'tx-3' (00000000803de2ec): kobject_uevent_env
[  639.589391] kobject: 'tx-3' (00000000803de2ec): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-3'
[  639.599867] kobject: 'tx-4' (00000000d2fec1d7): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.609451] kobject: 'tx-4' (00000000d2fec1d7): kobject_uevent_env
[  639.615926] kobject: 'tx-4' (00000000d2fec1d7): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-4'
[  639.626337] kobject: 'tx-5' (00000000cfd19aa6): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.635936] kobject: 'tx-5' (00000000cfd19aa6): kobject_uevent_env
[  639.642356] kobject: 'tx-5' (00000000cfd19aa6): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-5'
[  639.653326] kobject: 'tx-6' (000000004280d332): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.662946] kobject: 'tx-6' (000000004280d332): kobject_uevent_env
[  639.670587] kobject: 'tx-6' (000000004280d332): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-6'
[  639.681002] kobject: 'tx-7' (00000000c67a5929): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.690608] kobject: 'tx-7' (00000000c67a5929): kobject_uevent_env
[  639.697069] kobject: 'tx-7' (00000000c67a5929): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-7'
[  639.707458] kobject: 'tx-8' (00000000fd9344b2): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.717056] kobject: 'tx-8' (00000000fd9344b2): kobject_uevent_env
[  639.723472] kobject: 'tx-8' (00000000fd9344b2): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-8'
[  639.733872] kobject: 'tx-9' (000000002c0356bd): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.743453] kobject: 'tx-9' (000000002c0356bd): kobject_uevent_env
[  639.750017] kobject: 'tx-9' (000000002c0356bd): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-9'
[  639.760430] kobject: 'tx-10' (00000000c0f77c09): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.770294] kobject: 'tx-10' (00000000c0f77c09): kobject_uevent_env
[  639.777137] kobject: 'tx-10' (00000000c0f77c09): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-10'
[  639.787845] kobject: 'tx-11' (00000000dd8e98db): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.797540] kobject: 'tx-11' (00000000dd8e98db): kobject_uevent_env
[  639.804041] kobject: 'tx-11' (00000000dd8e98db): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-11'
[  639.814651] kobject: 'tx-12' (0000000062998c37): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.824324] kobject: 'tx-12' (0000000062998c37): kobject_uevent_env
[  639.830916] kobject: 'tx-12' (0000000062998c37): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-12'
[  639.846802] kobject: 'tx-13' (00000000fb3aa4b0): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.856495] kobject: 'tx-13' (00000000fb3aa4b0): kobject_uevent_env
[  639.863002] kobject: 'tx-13' (00000000fb3aa4b0): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-13'
[  639.873571] kobject: 'tx-14' (00000000521c4242): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.883250] kobject: 'tx-14' (00000000521c4242): kobject_uevent_env
[  639.889815] kobject: 'tx-14' (00000000521c4242): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-14'
[  639.900386] kobject: 'tx-15' (00000000ed0cbfce): kobject_add_internal: parent: 'queues', set: 'queues'
[  639.910277] kobject: 'tx-15' (00000000ed0cbfce): kobject_uevent_env
[  639.916826] kobject: 'tx-15' (00000000ed0cbfce): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-15'
[  639.928117] kobject: 'gretap0' (000000005498ebc5): kobject_cleanup, parent           (null)
[  639.936697] kobject: 'gretap0' (000000005498ebc5): auto cleanup 'remove' event
[  639.944066] kobject: 'gretap0' (000000005498ebc5): kobject_uevent_env
[  639.950805] kobject: 'gretap0' (000000005498ebc5): kobject_uevent_env: uevent_suppress caused the event to drop!
[  639.961261] kobject: 'gretap0' (000000005498ebc5): calling ktype release
[  639.964053] kobject: 'team0' (0000000095bb4b2a): kobject_add_internal: parent: 'net', set: 'devices'
[  639.968291] kobject: 'gretap0': free name
[  639.979203] kobject: 'team0' (0000000095bb4b2a): kobject_uevent_env
[  639.988292] kobject: 'team0' (0000000095bb4b2a): fill_kobj_path: path = '/devices/virtual/net/team0'
[  639.997823] kobject: 'queues' (000000005248fc42): kobject_add_internal: parent: 'team0', set: '<NULL>'
[  640.007424] kobject: 'queues' (000000005248fc42): kobject_uevent_env
[  640.013983] kobject: 'queues' (000000005248fc42): kobject_uevent_env: filter function caused the event to drop!
[  640.024608] kobject: 'rx-0' (000000005179b21b): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.034151] kobject: 'rx-0' (000000005179b21b): kobject_uevent_env
[  640.040876] kobject: 'rx-0' (000000005179b21b): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-0'
[  640.051296] kobject: 'rx-1' (00000000f17520c8): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.060869] kobject: 'rx-1' (00000000f17520c8): kobject_uevent_env
[  640.067323] kobject: 'rx-1' (00000000f17520c8): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-1'
[  640.077695] kobject: 'rx-2' (00000000ae0bf50f): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.087440] kobject: 'rx-2' (00000000ae0bf50f): kobject_uevent_env
[  640.093962] kobject: 'rx-2' (00000000ae0bf50f): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-2'
[  640.107727] kobject: 'rx-3' (00000000ee200e2b): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.117463] kobject: 'rx-3' (00000000ee200e2b): kobject_uevent_env
[  640.124021] kobject: 'rx-3' (00000000ee200e2b): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-3'
[  640.134667] kobject: 'rx-4' (00000000261186a0): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.144386] kobject: 'rx-4' (00000000261186a0): kobject_uevent_env
[  640.151108] kobject: 'rx-4' (00000000261186a0): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-4'
[  640.161680] kobject: 'rx-5' (00000000ee7807cc): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.171523] kobject: 'rx-5' (00000000ee7807cc): kobject_uevent_env
[  640.178404] kobject: 'rx-5' (00000000ee7807cc): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-5'
[  640.188947] kobject: 'rx-6' (00000000fffb9483): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.198643] kobject: 'rx-6' (00000000fffb9483): kobject_uevent_env
[  640.205167] kobject: 'rx-6' (00000000fffb9483): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-6'
[  640.215722] kobject: 'rx-7' (0000000009f816b4): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.225588] kobject: 'rx-7' (0000000009f816b4): kobject_uevent_env
[  640.232115] kobject: 'rx-7' (0000000009f816b4): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-7'
[  640.242663] kobject: 'rx-8' (00000000098aa6d7): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.252370] kobject: 'rx-8' (00000000098aa6d7): kobject_uevent_env
[  640.258980] kobject: 'rx-8' (00000000098aa6d7): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-8'
[  640.269597] kobject: 'rx-9' (00000000ffbf014c): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.279326] kobject: 'rx-9' (00000000ffbf014c): kobject_uevent_env
[  640.285967] kobject: 'rx-9' (00000000ffbf014c): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-9'
[  640.296690] kobject: 'rx-10' (00000000fa10953d): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.306372] kobject: 'rx-10' (00000000fa10953d): kobject_uevent_env
[  640.312884] kobject: 'rx-10' (00000000fa10953d): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-10'
[  640.323487] kobject: 'rx-11' (000000007b21cc85): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.333144] kobject: 'rx-11' (000000007b21cc85): kobject_uevent_env
[  640.339722] kobject: 'rx-11' (000000007b21cc85): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-11'
[  640.350321] kobject: 'rx-12' (00000000b45869d8): kobject_add_internal: parent: 'queues', set: 'queues'
[  640.359967] kobject: 'rx-12' (00000000b45869d8): kobject_uevent_env