5043d217ed760504ccf858caee7403637cb726b5036d0b37306b2d96dfb2a9758d38e0fe6285826fc6feac11e657913c66bab03a4bcf0ace68b2c29204a874f645f5cd93fba416fdc7c574ec06dc2e1a27f19378dbde6343d77e84c5527cc649480a3ddf4ec9d7c100327702d1acff9ac268f00bd91576d94d83420109ccc12b0fc053978551af699d300370a193927d33237f5fbbd58b55d18f392c9f6c65188bb63e1fc8cbf74a665bb9a14c3769b93e31ed8066328e9fb196f38a7e2f", 0x1000, 0xfffffffffffffff9}, {&(0x7f0000000380)="877eb46f814a103c6668adc626ce8e", 0xf, 0x7}, {&(0x7f00000003c0)="7a64e7361fa0527f6f800e432fb0fad11e8c999d26d3e61ec7d832625631fec7a3ba8817e2f2613ece335094b555fd5eef38f59abc5df2cead7fa5bac3dd9f5c836c95845fac3912a24f830de56f07f84c9f6b206319aece804144a0500a70a2377a553f926b104a96585b6730cbc78ceabf0ec8694aac9f2fa60ba80fdf4b510c420d7124e50f7e4e45ddb675733313930da468a11cdb", 0x97, 0x1}, {&(0x7f0000001500)="9bd35529f20ce2e9d91fb0c9a7e3f879f7ed76e30b434723a37902d76fb7050aa601170d5c827d2d3a0b24a2635dc34cb074bc68545dbadc28e98c1b8cd7daad200ebdb552c940d144ca132875fd1bf969bdb84931d0d60e88ac10e5df789d6505af52944011efe113551a9e848a39aca8c7c334b923a1a3693e84956609bf2699ee8ecb327324773259a96fab3568916b42713b42c13c434d2ce550e41cbbc24834a5b7de8a8247f11670b1c9105f9a476a632eb61667ae4ea472ef012b7eac060fc9a0bec849bc436564f4af0b95e55348bba194465c", 0xd7, 0x2}, {&(0x7f0000001600)="2a6e3eab0bcc6e342d9a98b98d7fb61d1d10acdbd8a31bfbb611d4a19c353351b2e9eda5df60a972c04ddd2e54bb61c5e4c32b9e9a80670f4a9d1f4f94cfeb1577eec7e1aab009e8b3b83d69984696d213cd03d16b75031439b098542c9e9c7d41c106242ef981bbd023042532266c6955ae9cad5285bf86ffc9db94adba1f018a73f547ec00ba53fe92011d48ffa86b31270703", 0x94, 0x3}, {&(0x7f00000016c0)="6c1437d47a5959158e7e3800efd32588ba2e207ca45e32000a8cf5a72f176adddeb664472ad6dec307430235fcba725a38351516e4606b9a7031ca7fb6f445f22f0d17e4fe95121b62d1dfe5c715ed360700cd13f3fd455b2ea7d72d553a5cee1da2612d3d271261c7e41beb7529ab284e188cea01bd29dfc33c0afa0563cee9f78a873bff5cd7e0ed4c385b0fb17f16bd0db43f85b75f9758f59e2bff159324668cfdd5", 0xa4, 0x9}], 0x1, &(0x7f0000000480)={[{@dir_umask={'dir_umask', 0x3d, [0x37, 0x32]}, 0x2c}, {@gid={'gid', 0x3d, [0x38, 0x2d, 0x34, 0x37, 0x3f, 0x32, 0x30, 0x0]}, 0x2c}, {@session={'session', 0x3d, [0x3d, 0x36, 0x31, 0x3d, 0x2d, 0x39, 0x39, 0x7b]}, 0x2c}]}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0/file0\x00'}, 0x10) 13:26:38 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000003000)=@setlink={0x34, 0x13, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x4, [@generic="88fc3d6540"]}]}]}]}, 0x34}, 0x1}, 0x0) [ 518.329938] binder: undelivered transaction 401, put_user failed [ 518.345060] binder: 2059:2060 ioctl c0306201 200000c0 returned -14 [ 518.365798] binder: BINDER_SET_CONTEXT_MGR already set 13:26:38 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 518.387507] hfs: unable to parse mount options [ 518.392552] binder: 2059:2060 ERROR: BC_REGISTER_LOOPER called without request [ 518.392944] binder: 2059:2101 ioctl 40046207 0 returned -16 13:26:38 executing program 4 (fault-call:7 fault-nth:57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 518.448185] binder_alloc: 2059: binder_alloc_buf, no vma [ 518.453826] binder: 2059:2060 transaction failed 29189/-3, size 0-0 line 2967 [ 518.488833] hfs: unable to parse mount options 13:26:38 executing program 6: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x6, 0x8000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105517, &(0x7f0000000000)) [ 518.595378] FAULT_INJECTION: forcing a failure. [ 518.595378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.607397] CPU: 0 PID: 2127 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 518.614330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.623674] Call Trace: [ 518.626266] dump_stack+0x1c9/0x2b4 [ 518.629897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 518.635081] ? zap_class+0x740/0x740 [ 518.638799] should_fail.cold.4+0xa/0x1a [ 518.642859] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 518.647956] ? graph_lock+0x170/0x170 [ 518.651753] ? is_bpf_text_address+0xd7/0x170 [ 518.656245] ? find_held_lock+0x36/0x1c0 [ 518.660304] ? __lock_is_held+0xb5/0x140 [ 518.664367] ? check_same_owner+0x340/0x340 [ 518.668683] ? rcu_note_context_switch+0x730/0x730 [ 518.673624] __alloc_pages_nodemask+0x36e/0xdb0 [ 518.678286] ? lock_downgrade+0x8f0/0x8f0 [ 518.682432] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 518.687438] ? graph_lock+0x170/0x170 [ 518.691229] ? __lock_is_held+0xb5/0x140 [ 518.695282] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 518.699697] ? __lock_is_held+0xb5/0x140 [ 518.703763] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 518.709300] alloc_pages_current+0x10c/0x210 [ 518.713704] __get_free_pages+0xf/0x40 [ 518.717583] mmu_topup_memory_caches+0x1f8/0x3a0 [ 518.722329] ? kvm_apic_has_interrupt+0xe9/0x230 [ 518.727091] kvm_mmu_load+0x21/0x10e0 [ 518.730892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 518.736431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 518.741965] vcpu_enter_guest+0x3aa6/0x6090 [ 518.746281] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 518.750518] ? kvm_set_msr_common+0x26a0/0x26a0 [ 518.755182] ? zap_class+0x740/0x740 [ 518.758889] ? perf_trace_lock+0x920/0x920 [ 518.763117] ? __lock_acquire+0x7fc/0x5020 [ 518.767360] ? vmx_vcpu_reset+0x1040/0x1040 [ 518.771676] ? graph_lock+0x170/0x170 [ 518.775486] ? __lock_is_held+0xb5/0x140 [ 518.779544] ? lock_acquire+0x1e4/0x540 [ 518.783508] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 518.788520] ? lock_release+0xa30/0xa30 [ 518.792487] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 518.797753] ? kvm_arch_dev_ioctl+0x610/0x610 [ 518.802237] ? preempt_notifier_dec+0x20/0x20 [ 518.806739] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 518.811579] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 518.816604] kvm_vcpu_ioctl+0x7b8/0x1300 [ 518.820662] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 518.826374] ? find_held_lock+0x36/0x1c0 [ 518.830437] ? lock_downgrade+0x8f0/0x8f0 [ 518.834588] ? rcu_is_watching+0x8c/0x150 [ 518.838725] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 518.843136] ? __fget+0x414/0x670 [ 518.846581] ? match_held_lock+0x821/0x8d0 [ 518.850820] ? expand_files.part.8+0x9c0/0x9c0 [ 518.855394] ? kasan_check_write+0x14/0x20 [ 518.859632] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 518.864579] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 518.870280] do_vfs_ioctl+0x1de/0x1720 [ 518.874167] ? ioctl_preallocate+0x300/0x300 [ 518.878581] ? __fget_light+0x2f7/0x440 [ 518.882562] ? fget_raw+0x20/0x20 [ 518.886008] ? __sb_end_write+0xac/0xe0 [ 518.889985] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 518.895513] ? fput+0x130/0x1a0 [ 518.898790] ? ksys_write+0x1ae/0x260 [ 518.902585] ? security_file_ioctl+0x94/0xc0 [ 518.907000] ksys_ioctl+0xa9/0xd0 [ 518.910459] __x64_sys_ioctl+0x73/0xb0 [ 518.914350] do_syscall_64+0x1b9/0x820 [ 518.918238] ? syscall_slow_exit_work+0x500/0x500 [ 518.923074] ? syscall_return_slowpath+0x5e0/0x5e0 [ 518.927996] ? syscall_return_slowpath+0x31d/0x5e0 [ 518.932927] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 518.938288] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 518.943130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 518.948309] RIP: 0033:0x455b29 [ 518.951483] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.970873] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.978588] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 518.985875] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 518.993136] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 519.000395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 519.007664] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000039 13:26:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x2000000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:39 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)="aafaf9583b21a8c98cbd27f1d82dc5fb4c67cd9080e2e445faf65cfed1a01f835fbfc8e326058528b66988cfbfc32994139eeab790a04685637afdbd6bf51c35a360c95ed321774bd1d9", 0x4a}, {&(0x7f00000002c0)="a4cd0956572e3666ef767afdddce1e79eb28f8e2c2d990e515da0dfa38050fbb712858af661226182d646180a340b0350b9e68be3feac75e4f67ccf0f284073c4b881657e1664119062b25fe06c052b5bb53c55bdcc99cb149d69069bfe60ab127fe85f23e736f2259fe31dc06cc9763225c149be234c77301a1949aea5a6a7052cae5f06a8bc369893837ca308bd9f1", 0x90}, {&(0x7f0000000380)="1593c7b8bfb6d98bcec1b6f3822d740d3a7e1e5848f44b550c16d557789924caf3fcbc5b256f9227e3cb27a65e2bd58c739e0a31f9c233cfce62e98e479be7201ac5b59f655f919d2be4ed65288405d4d6d24695936d503b3d5aa20fc39d5d3dfc2984e7c37372bec0c329c1acfdc7f8eac465bacaa63c8a86be75a7b83597e7cf3f5211a1909e248c90e13e3ab8e91df27799b61e821523f2f2f9ce182a1d42073d767cff5c1f2e327574a0850c64b27595137946b67bf2c9fa2d1a9769042fa402cc0b126a671eb81000c3e93178f85ec0603f9886a9d35ecc681bbdeb9f7336e002eff3", 0xe5}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="c96ee587a5eb1010059ce287d8b29fabca5df13bb62545ba9f72a84f1a300f886f08ad065648eb324fb15672d11cd485a97c931b1a20931a274109293eeb1d170d74c9722cb78ac4f1071891fe526190c2852ba43ca6f8e9c0e7d6a07cdb62b7f3879ae2df1ebcedbca5dcca8d204d41fd218b6dfb182f50e5d4d5ac697f98a2b7527edc5a6207be94583c1f102e7fdf5f890f65d1d4c726772f48c767b2411bad27cb58959ca661053da1f9b0b492295996f3afd29c10e18e2e59471e36f58b9738c24c8414b5fdcf23d2827f92fe5da53ccbdd0cf6240d572cd9cd993958a067085591b553a023172fee81e01d0ce09a881242821398daf1598ec742e131a1074854a38e7de67c0096fcfb1a63d6544a0dc452713247010135d9de26f2e77f0f27a5d27c84913b3c75eed7eaeed643b48bc5f21741b78edfad7ca5bd905eb24c03d85521fb41e0cfaacfa67d9834434b34ebe34038001048cf6da8bed36fd51834fe7865087f892d2290d72901ab8d02a2353077100b51163f8367a79904dbc8f3364280e0e487fd952c0d902dbd8a513317613e7e4a29ff6edc93d1a08158ed91dd8deb0f77e7a5e413d3d6d8243aa5528b1c0356df6e9b6fe264ecb4964b778313e5a8defedf9957ef8de48fc69673edb14c499f00ebe9cb082b025863cda34577c9a8b489b87107a684fb780d726a02b741754518080047622d517d8d3cc3d99439d904b16a0683d9b3cdfa39a028e18b779150bebfa4d635deff2e39034ac93d9a11da2f688e9eb659b3da4958c4079c6d9c111d9eb0f3ce2f51ff33889a67776fa122a616dd8faa8451b3eb6f1194c3749376a613576aab05ea63f5feb231bb91cf514806ad2a56465b5e7f3a32096fb59eaac21efbd571aa0739891a96afa98b7863435b026cb155837b1ead575c0e506214fb0cc907bf6bf8ae44caff1ba64319c9433b3017ffdbe6323044dd18351933e3f838ce7b8590ae399017c240346b3bbf449b13783a6f853af5936d02f00ffdd82ee4b46f04580c7d317ee8f2c90bae515e944426ea18598138c356b2ab489e6fdb01e8b9ce0d373c94ba9a355a4cde1ba71d45a14112e2e3a6e7d2b68867d5eae540985fcbf8e9c385d1d8ea2e0f8b474e8de27658b470fd8bde3f15a6499036e88694676c50930b7bb0601a9851c13c3535ce9e74ae4c5ddfce11ada9fa823afd976f6c57ec658255f3b7653852f179f3a6a95466c669c0b7400b76832dc417524a3b87097d3942de8e62d8dbeb392fe6ff94eaad5c98de7c3da55ba2c1cd30f222087e116fe6e12d6bb02fb2304ba3f5cbb798ae3d032df290ffeafee67b19d98b0b9ec0beae56074878dc909a22b26d265a5e52af915ac793b9f771ac7b47115ada97dfe2098915be87a44471f0e2602c7ae17c9486ca0783b2ff53088af87a5d0321babcb9dbda255433409657165780e5fc8da5e65b763a0d25525ea3bd8a428d28062dc7782f1d6ae59c3146d4ca7f9787ecb088b059f9be8a3678af8c333758eaa15a0cd4ca2f24b7df4ffd19ef5a8e3bec67c8a07ee5b2175b0d97d944357c30cbc52cda99a3a7a5e683fe34a4031b491f25e69e237dd443ddc9a3af38977cde3365f4a2c3020948109508f37fe1e9f2e0bc58829aa295fe4578fd57ce96f26219fe5bcc6717a41dcb43e37347cfb2b3026323d2513fff73a446a6f1b64c35639d98a0f92ca4c1bb7cce38c42086b661e51b1d2e913a52e8922f45e4d069fbcc085ae81b755d426383ea0fbfa213c68ced635d27366d1b95f4a685ebee2933394c7543cb94079e58426dd1cd34ab7503fca0efe91fb73e894d747a504e25fb6a8c3cde7673397a41918e1ee7599ebac7978b67bc0b9d205bf4990975b87eee9ce0f92dba2f42eb8895e5ca0d21775d4303fbdc449720e2d0007dbed81bd7145c4824a35d5b191a0c633a293ef78ad7bd43ada9d2c16c592f0cbc6ee4743d63e74208e96c70fc6803536810f13d1a0ed492a46280810317af91a1cbf07a1449554273c8d332fbbc2d5007b5328d9c356710655c3b9a78c54e184d7de00bb63b099f67e678c508a437c695bf999860a19b2906595839371a45e940e58a0e5c0dc0df1e5efbbcf3122ed3cc5e2be36553a929a13965581ab9e424511a02e1ab92d8fbd3448b93e69ccec6404a7ab6a5c2e27750a3355b94f29d3fbe87aa593f4a36c1abf7f6329794cf246f27e776a9844e191e96a60a2d31ecee0cd52f4234369aa9a1147d7b924164cce47c6aa1325f6a3167c3353de1423f9020dd446b249917ffbcd6b66aeb5422665893165900d3a1022e801a97683f6d6b07f8b38084b2ddeb0a25d9f02c51f661529038640cc54f98cab942662f869f7b02f443289605b02f9f782cafa5bbf6fe8fbbbb4a084f35bd0a1447b8e512183be7e1fa6709cd002d3d40f6de411dabd1168122e327005b2e850609f5994c81006945f831143ed4001da91d5a437f2bdaf133656cf74eee7c37a1f99e52f258a6d0232dc2d6c76da8856da07dfd38842807c461d1945e953c1fa595ca925a40146c3201c7ec085f7a174acfd91d506e6b7782a73110a12f51ded98831858026fe6954f85172768da802390b034c90b5d6fecb784309c023fd07c94bea9628360b52d06a93d56cace07432583cdc3a85ac61ee12f0e12795b8eea6f66ea975a297e1a8e23c556b60dee1a5f45412aad0fb89ef51513b4c4a6953c731771087468f6bc848b652a8a549c584e88551b71c84451016bb86d908ab0ce30f4c9275bc74bd68d6935e65975a61686f60d3f276526426d8843fc710aed610016238712a683ffbf65f460f426317f277065d9c9fea115a82133fe9d179639e2a2071f311cca6e1ae79b54d9061450bd4f45a8042605b03b0caf73dd8d304c10718424b50d1a6e7d0180d9dfefc22976a9e6fc920d6d406ca6268883266d4708406f36239ae510291033fd0804eb0da957c44b353f35d94375da41ba02ee1679226bd31b506f100ad24d5e2bcf742925c318764ee7656cd861055b7e4fc83a98ded2e797943330c47523b17e940b0e5d98e03789a12bec91f8cc0a3857f7487b02185fe98dcd0b9318587d6f6eb7ed042c4b875542b0bd5697b16bdd90c0cfbc2c9c791483d628a7b3a549ed9c482c34efba1b5dc1407d4c2d7670068c6db7cffd89f415d7d4a17a75d371cb21ad4b0002db42ed27df8785f032496a70d1c5a58a68dfc18a2df55831818ef1970f18f4dd0dc68f2a187622cb7c9eb0a9b758cc4b90673bb2a41556bba97f76a1513fb9f4936ee1c6753c8cbf71968cc83032c8d04ebf1ca891bcc37dfa03d885010f1cac7861f3d2ae2b76e88512d4db8efaa78e86e9d5924168b560d2412c4259c81e58f5f415abcca52d241836a1edb9dd85dee8bc8795ba858947319b532fc465282ab3d9de5f0c6db3e58f36a69c81938175e0e2a770366b61a91024d4b88b9808bfcb23ad597a849fc3b46abd3feb4c9bbd9edee81a7fb76693fe8c29d4e3e65389e034c3eaa2b747b5d62ea57c76b7932f771434cbdbde9101742c8de496ccfd012826f3ce76c9c69e3aa818605e1062811b5fbbe3d45412fb2abcadf6d9204e0aa5eaa815eb2f5110af2219b265401dce04598dcb00a5ef58a1c61456b03e5ec97ab7dc61f5019daaa81a8a64125155ed8bb61565c624a2812065ccce4767a32eba18adbdbe49edf77c972b6ebee3b123cba98ece30b903123d5e28f92c3c39ed368b0fdb527c7554e4bfce6c9e6a49a27dab01300a49b6be0df816740720877ccb7ac9e4d6272bafdfb4b1c066cca59760d764b36f357de7e2874b819a2afb45b11621dd5989e13bfada27c2def4ba7482e6740c697566dd21d02a2169111fb423edb65d7748287bff6ccbe21f7cc5267177d9072b673c7b6744b2a07ad440735700b550a87dc76d0bac84753d01cf156111b4c0da09e22f1b9a06d04d524cae0870a26ca13afbd456f85d7ec6854cea73ba6e7e3e92e3065a8cbe51de9a3fd7d9522ace484cc355d8b852820e703bd8cd909fa1137f87711c733c27af2264212078ddf4ed4c24d4ca9ae69e93fce21c0e8ba2cbb3168b6f766e3e3a87b3c0beea5ad3a73453848fa0ee07d051f877da54623db3e0a9382ed46b511f9c486edd015f71766c870938449ac056b6d000d62bd8236ba1999525b3a849b2df73692e0964aa02eed61df30ac752ca8c31a9723f96b863460efac37d171c818afd5db068989240b196a98f13c3cde3feeeeff870ab7370d3009f5a07529c805747a778f04fc6e564df4cbba21dd144440c4a2155fe70fbbc0a16d781e065001d35b19a490e6b2f5579cd9689c8d9f22cd90feb7cf08b122417ceea5070dd31651a0f3d2f47a501358648b9250009351961b9b6fc1e1e069ce94e4782569ce94f0b71540fb15f067ada1db21934d39a4811a38f80ec6cb24900374f917891bfbee1f797f6a6918dfb04272a919010937aa571c5187815d45d23bc2655b544b81ea0c1f29220d422c58e43d0395ecf6370e225fa8326b547ab1f0829ae016907be69febaeed995d1b58f9101bcdf17089680a734d78822eacbf1e85b5133b07f06b62edffd3f620aefbb63df734b73aaebc49fcb6b69c89c8a6844a7772a47c514866bbb733a9059980ea06f1ec913035d0cdf18505503361ad2c73f42fdaf7b6f3f520b3777dbda75ad4601b1b9b33404c7aa3480bd1ac4a4bc46ef76b3fa33033c8d33c9335e026a5c83be572c62fcbe3a4080b5084ec07871f1bffde7a0740959e510b7a16eb674644659e406dbd9eb1e10e265b48239006cf9294c200510fc94bfabf033590ded44d49e47fef758350bdc7b426524c020de0a81b75ff1ff2dba8d5b1733366e11107984eea83753284a898f8321d1e7a24cff604375867e85d5135663611ba283cff3d2c484affd04a0760d3691a548f830ff177feb09aebc674f818fab3f674e40719939591402678e8083422af352b417ea483ac46b1ff35aa1a12aecd0352393a099423770fea5155c8783969641f33d345417587bf276b62ad87d0a67e21c38d5d1f695c82bbd18b18191ffeb11d96060c328de4b3e31528812dd230ddc6b4e3b5ab33497f921e3250def4cb42112f9a68b10e3acba3465a330c08bedb3afc53d93cddf2bf470437b4b1f389d2ac08b4bd83a4916e90facb859e0c0e3d7a2ddf382f2261221f9fc703cac8b557d25ac2f250f25305c724438fbc2f7666a4669973f81b0850b60d76179793549d3475f57fbdb7b81865ea99e8940e2385cc1bfff0895171fde802954a432d01364a2cb0f855b56346eeefc386ca3c82f905d1f6b90a7907e84443e2c57f9a57f8c8afa76c74e8e0122b3297112b4165dc8d107f823970a37dc02194534c7d0248b443bcd4eaaab4f3f68a3c04b5129785bd1844ee1333e5112732dfaf260aff533d404842705a714cee1dbe8bec103fadadd4d4fd40e9c892702c12de37c95bf9844bff5b284fb09ac7f8d9e98388fa64c3fb368c54433e6f9c7037e0395c3b2088666f470916d5a9b33d25eb2b2eb0312c8169cfd81ed8d2ba0b9e149170b958893f9bd7a36ec59156e8730497ffa9dbfc9a96a76417211ee86b2d4fe0411b7eedc3829951722348e5555f8192ad7fbbe478da94c02a7557ca46f8c043dc31b48b9cae94b289a380c634fd544d79bee00a97769578442ae796abb778ac1d888407e679112e0999fac4ed199439b300380ad048f556f75d1397d3cb9044485fe0005d0683ba92d78cda1157fb8a5e", 0x1000}, {&(0x7f0000000200)="84b481e81c35a9843dfdea106dcf672608cd0abbedc4cdd1d79b2af7aad90073374559dcd8029b98c5d6", 0x2a}], 0x6, &(0x7f00000025c0)=ANY=[@ANYBLOB="180000000000000017010000040000001f000000000000001800000000000000170100000300000001000000000000003800000000000000d401000002000000240000008d05cdae32be54937f9f5f9aeb1cc05222edec199796417701dc0266dbfe1ebfb1dfdb5d18000000000000001701000004000000030000000000000018f96242ba0b970348b6000000000000001701000003000000db259dba00000000180000000000000017010000030000000100000000000000"], 0xb0, 0x20004881}, 0x800) syz_open_dev$mouse(&(0x7f0000002500)='/dev/input/mouse#\x00', 0x4, 0x2600) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@check_strict='check=strict', 0x2c}]}) 13:26:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x2000000, 0x8}}}}}, 0x0) 13:26:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="1cc137e4ed7c754788193716172f1a5e35e375f44055938a2523c3a43d5cbea248f788d583538797b736f8b12880a5f674fef4164fa0964d88f319fcc02ca33a471ba0a47f39c60c34b50b2c62d54a43cb47a8828f6286b03411aef4a5093886bc79c1cc2369eea5468d38c6b349e5", 0x6f, r4) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c1e00ffff53ef0700010000006e5fbe5a0000c9ca68e30d69e50000000000000100000000f77f0000002c0000000000008893", 0x66, 0x400}], 0x0, &(0x7f0000000000)) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/174, 0xae}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xcf6d, 0x402) unlinkat(r5, &(0x7f0000000080)='./file0\x00', 0x200) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600010100000000000000002f26478220c7981be70e7618000000", @ANYRES32=0x0], 0x18}, 0x1}, 0x0) [ 519.063626] binder: undelivered TRANSACTION_ERROR: 29189 [ 519.069225] binder: undelivered TRANSACTION_COMPLETE 13:26:39 executing program 6: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x88200, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x20, r0, 0x201, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) [ 519.153730] binder: 2146:2151 ERROR: BC_REGISTER_LOOPER called without request [ 519.180141] EXT4-fs (loop1): filesystem is read-only [ 519.185493] EXT4-fs (loop1): unsupported inode size: 32759 13:26:39 executing program 4 (fault-call:7 fault-nth:58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 519.239838] netlink: 'syz-executor6': attribute type 1 has an invalid length. 13:26:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 519.284355] ISOFS: Unable to identify CD-ROM format. [ 519.310363] netlink: 'syz-executor6': attribute type 1 has an invalid length. 13:26:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x89060000, 0x8}}}}}, 0x0) 13:26:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1000000000000) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d02, 0x8]}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x9d, 0x7, 0x10001, 0x4, 0xf670, 0x5, 0x1, 0x67e05af5, 0x200, 0x6, 0x80000000000000}, 0xb) [ 519.421528] FAULT_INJECTION: forcing a failure. [ 519.421528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.433504] CPU: 1 PID: 2173 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 519.440447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.440726] ISOFS: Unable to identify CD-ROM format. [ 519.449911] Call Trace: [ 519.449940] dump_stack+0x1c9/0x2b4 [ 519.449960] ? dump_stack_print_info.cold.2+0x52/0x52 [ 519.449981] ? lock_downgrade+0x8f0/0x8f0 [ 519.450007] should_fail.cold.4+0xa/0x1a [ 519.450028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 519.450046] ? graph_lock+0x170/0x170 [ 519.450070] ? is_bpf_text_address+0xd7/0x170 [ 519.488162] ? find_held_lock+0x36/0x1c0 [ 519.492230] ? __lock_is_held+0xb5/0x140 [ 519.496296] ? check_same_owner+0x340/0x340 [ 519.500613] ? rcu_note_context_switch+0x730/0x730 [ 519.505553] __alloc_pages_nodemask+0x36e/0xdb0 [ 519.510226] ? lock_downgrade+0x8f0/0x8f0 [ 519.514372] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 519.519383] ? graph_lock+0x170/0x170 [ 519.523178] ? __lock_is_held+0xb5/0x140 [ 519.527232] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 519.531647] ? __lock_is_held+0xb5/0x140 [ 519.535724] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 519.541260] alloc_pages_current+0x10c/0x210 [ 519.545680] __get_free_pages+0xf/0x40 [ 519.549569] mmu_topup_memory_caches+0x1f8/0x3a0 [ 519.554413] ? kvm_apic_has_interrupt+0xe9/0x230 [ 519.559175] kvm_mmu_load+0x21/0x10e0 [ 519.562978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 519.568508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 519.574042] vcpu_enter_guest+0x3aa6/0x6090 [ 519.578359] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 519.582592] ? kvm_set_msr_common+0x26a0/0x26a0 [ 519.587261] ? perf_trace_lock+0x920/0x920 [ 519.591493] ? __lock_acquire+0x7fc/0x5020 [ 519.595729] ? vmx_vcpu_reset+0x1040/0x1040 [ 519.600068] ? graph_lock+0x170/0x170 [ 519.603862] ? __lock_acquire+0x7fc/0x5020 [ 519.608099] ? __lock_is_held+0xb5/0x140 [ 519.612157] ? lock_acquire+0x1e4/0x540 [ 519.616122] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 519.621321] ? lock_release+0xa30/0xa30 [ 519.625287] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 519.630558] ? kvm_arch_dev_ioctl+0x610/0x610 [ 519.635043] ? preempt_notifier_dec+0x20/0x20 [ 519.639548] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 519.644379] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 519.649397] kvm_vcpu_ioctl+0x7b8/0x1300 [ 519.653455] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 519.659159] ? find_held_lock+0x36/0x1c0 [ 519.663221] ? find_held_lock+0x36/0x1c0 [ 519.667285] ? lock_downgrade+0x8f0/0x8f0 [ 519.671430] ? kasan_check_read+0x11/0x20 [ 519.675575] ? rcu_is_watching+0x8c/0x150 [ 519.679714] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 519.684132] ? __fget+0x414/0x670 [ 519.687590] ? match_held_lock+0x821/0x8d0 [ 519.691819] ? expand_files.part.8+0x9c0/0x9c0 [ 519.696402] ? kasan_check_write+0x14/0x20 [ 519.700632] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 519.705564] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 519.711291] do_vfs_ioctl+0x1de/0x1720 [ 519.715173] ? __lock_is_held+0xb5/0x140 [ 519.719227] ? ioctl_preallocate+0x300/0x300 [ 519.723626] ? __fget_light+0x2f7/0x440 [ 519.727592] ? fget_raw+0x20/0x20 [ 519.731046] ? __sb_end_write+0xac/0xe0 [ 519.735032] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 519.740559] ? fput+0x130/0x1a0 [ 519.743830] ? ksys_write+0x1ae/0x260 [ 519.747631] ? security_file_ioctl+0x94/0xc0 [ 519.752045] ksys_ioctl+0xa9/0xd0 [ 519.755494] __x64_sys_ioctl+0x73/0xb0 [ 519.759375] do_syscall_64+0x1b9/0x820 [ 519.763265] ? finish_task_switch+0x1d2/0x850 [ 519.767756] ? syscall_return_slowpath+0x5e0/0x5e0 [ 519.772690] ? syscall_return_slowpath+0x31d/0x5e0 [ 519.777622] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 519.782983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 519.787825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 519.793004] RIP: 0033:0x455b29 [ 519.796183] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 519.815558] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.823276] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 519.830534] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 519.837792] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 519.845058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 519.852316] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003a 13:26:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa8"]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x40004, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000140)=""/79, &(0x7f0000000040)=0x4f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 519.930096] binder: undelivered transaction 404, put_user failed [ 519.937551] binder: 2146:2151 ioctl c0306201 200000c0 returned -14 [ 519.956515] binder: BINDER_SET_CONTEXT_MGR already set 13:26:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet6(0x10, 0x1003, 0x200000000) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390002000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0xd9, &(0x7f0000000400)}, 0x800) 13:26:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) recvmsg(r1, &(0x7f0000002540)={&(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/120, 0x78}, {&(0x7f0000001140)=""/197, 0xc5}, {&(0x7f0000001240)=""/55, 0x37}, {&(0x7f0000001280)=""/248, 0xf8}, {&(0x7f0000001380)=""/117, 0x75}, {&(0x7f0000001400)=""/168, 0xa8}], 0x7, &(0x7f0000001540)=""/4096, 0x1000, 0x1}, 0x22) connect$netlink(r2, &(0x7f0000002580)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40200000}, 0xc) [ 519.987175] binder: 2146:2188 ioctl 40046207 0 returned -16 [ 520.019874] binder: 2146:2151 ERROR: BC_REGISTER_LOOPER called without request 13:26:40 executing program 4 (fault-call:7 fault-nth:59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.053428] binder_alloc: 2146: binder_alloc_buf, no vma [ 520.059119] binder: 2146:2151 transaction failed 29189/-3, size 0-0 line 2967 [ 520.191101] binder: undelivered TRANSACTION_ERROR: 29189 [ 520.197632] binder: undelivered TRANSACTION_COMPLETE [ 520.258330] FAULT_INJECTION: forcing a failure. [ 520.258330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.270404] CPU: 0 PID: 2213 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 520.277333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.286762] Call Trace: [ 520.289358] dump_stack+0x1c9/0x2b4 [ 520.293000] ? dump_stack_print_info.cold.2+0x52/0x52 [ 520.298206] should_fail.cold.4+0xa/0x1a [ 520.302292] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 520.307401] ? graph_lock+0x170/0x170 [ 520.311218] ? find_held_lock+0x36/0x1c0 [ 520.315286] ? __lock_is_held+0xb5/0x140 [ 520.319385] ? check_same_owner+0x340/0x340 [ 520.323721] ? rcu_note_context_switch+0x730/0x730 [ 520.328669] __alloc_pages_nodemask+0x36e/0xdb0 [ 520.333334] ? lock_downgrade+0x8f0/0x8f0 [ 520.337471] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 520.342473] ? graph_lock+0x170/0x170 [ 520.346260] ? __lock_is_held+0xb5/0x140 [ 520.350317] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 520.354723] ? __lock_is_held+0xb5/0x140 [ 520.358867] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 520.364394] alloc_pages_current+0x10c/0x210 [ 520.369586] __get_free_pages+0xf/0x40 [ 520.373474] mmu_topup_memory_caches+0x1f8/0x3a0 [ 520.378220] ? kvm_apic_has_interrupt+0xe9/0x230 [ 520.382972] kvm_mmu_load+0x21/0x10e0 [ 520.386768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 520.392296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 520.397824] vcpu_enter_guest+0x3aa6/0x6090 [ 520.402135] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 520.406363] ? kvm_set_msr_common+0x26a0/0x26a0 [ 520.411031] ? perf_trace_lock+0x920/0x920 [ 520.415271] ? __lock_acquire+0x7fc/0x5020 [ 520.419507] ? vmx_vcpu_reset+0x1040/0x1040 [ 520.423827] ? graph_lock+0x170/0x170 [ 520.427627] ? __lock_acquire+0x7fc/0x5020 [ 520.431856] ? __lock_is_held+0xb5/0x140 [ 520.435909] ? lock_acquire+0x1e4/0x540 [ 520.439869] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 520.444884] ? lock_release+0xa30/0xa30 [ 520.448842] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 520.454119] ? kvm_arch_dev_ioctl+0x610/0x610 [ 520.458599] ? preempt_notifier_dec+0x20/0x20 [ 520.463088] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 520.467920] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 520.472930] kvm_vcpu_ioctl+0x7b8/0x1300 [ 520.476982] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 520.482679] ? find_held_lock+0x36/0x1c0 [ 520.486764] ? find_held_lock+0x36/0x1c0 [ 520.490840] ? lock_downgrade+0x8f0/0x8f0 [ 520.494980] ? kasan_check_read+0x11/0x20 [ 520.499115] ? rcu_is_watching+0x8c/0x150 [ 520.503255] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 520.507658] ? __fget+0x414/0x670 [ 520.511103] ? match_held_lock+0x821/0x8d0 [ 520.515327] ? expand_files.part.8+0x9c0/0x9c0 [ 520.519897] ? kasan_check_write+0x14/0x20 [ 520.524122] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 520.529045] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 520.534758] do_vfs_ioctl+0x1de/0x1720 [ 520.538646] ? __lock_is_held+0xb5/0x140 [ 520.542702] ? ioctl_preallocate+0x300/0x300 [ 520.547097] ? __fget_light+0x2f7/0x440 [ 520.551062] ? fget_raw+0x20/0x20 [ 520.554508] ? __sb_end_write+0xac/0xe0 [ 520.558480] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 520.564004] ? fput+0x130/0x1a0 [ 520.567287] ? ksys_write+0x1ae/0x260 [ 520.571082] ? security_file_ioctl+0x94/0xc0 [ 520.575480] ksys_ioctl+0xa9/0xd0 [ 520.578924] __x64_sys_ioctl+0x73/0xb0 [ 520.582802] do_syscall_64+0x1b9/0x820 [ 520.586675] ? finish_task_switch+0x1d2/0x850 [ 520.591169] ? syscall_return_slowpath+0x5e0/0x5e0 [ 520.596184] ? syscall_return_slowpath+0x31d/0x5e0 [ 520.601104] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 520.606461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 520.611294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 520.616476] RIP: 0033:0x455b29 [ 520.619649] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.638914] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.646610] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 520.653877] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 520.661134] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 520.668392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 520.675655] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003b 13:26:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x69e68efa3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x800e0000, 0x8}}}}}, 0x0) 13:26:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockname$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f000001dff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x3ff, 0x10000}, &(0x7f0000000180)=0xfffffffffffff870, &(0x7f0000000200)=0x6, 0x5, 0x10000, 0x6, 0x7fffffff, 0x2, 0x7}}], 0x58}, 0xfffffffffffffffc) 13:26:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0xfeffffff, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000000100)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)=""/29, 0x1d}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000b82000)={0x10000004}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x840, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 13:26:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:40 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x5001, 0xf000, 0x4, 0x3}) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f000084dfff)) 13:26:40 executing program 4 (fault-call:7 fault-nth:60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.876892] binder: 2232:2239 ERROR: BC_REGISTER_LOOPER called without request [ 520.949480] FAULT_INJECTION: forcing a failure. [ 520.949480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.961537] CPU: 0 PID: 2250 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 520.968579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.977948] Call Trace: [ 520.980565] dump_stack+0x1c9/0x2b4 [ 520.984222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 520.989440] ? zap_class+0x740/0x740 [ 520.993185] should_fail.cold.4+0xa/0x1a 13:26:40 executing program 6: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xc}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r1 = socket$inet(0x2, 0x4, 0x7ff) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x52c8, 0x1, 0x4}, 0xc) 13:26:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x401, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b805000000b9a50000000f01d90f009a75fe000066ba200066b8dff366efc4c10572d7090f22db36640f74900d30d3930fc7ab76000000660f6f3c5d0500000066ba2100b00eee0f0d7700", 0x4b}], 0x1, 0x1, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x6) [ 520.997275] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 521.002392] ? graph_lock+0x170/0x170 [ 521.006205] ? is_bpf_text_address+0xd7/0x170 [ 521.010742] ? find_held_lock+0x36/0x1c0 [ 521.014835] ? __lock_is_held+0xb5/0x140 [ 521.018932] ? check_same_owner+0x340/0x340 [ 521.023280] ? rcu_note_context_switch+0x730/0x730 [ 521.028279] __alloc_pages_nodemask+0x36e/0xdb0 [ 521.033098] ? lock_downgrade+0x8f0/0x8f0 [ 521.037273] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 521.042312] ? graph_lock+0x170/0x170 [ 521.046136] ? __lock_is_held+0xb5/0x140 13:26:41 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x7f, 0x0, 0x7, 0x7fffffff, 0x0, 0x6, 0x8000, 0x8, 0xb67, 0x6, 0x3b2e, 0xff, 0x10001, 0x6460, 0x8f, 0x5c5f584c, 0x8, 0x800, 0xc98, 0x8, 0xe2a5, 0x4, 0x8f5, 0x7fffffff, 0x7, 0x3, 0x800, 0x2, 0x5, 0x0, 0x8, 0x40, 0x7, 0x2, 0x0, 0xfff, 0x0, 0x3, 0x6, @perf_config_ext={0x9, 0x401}, 0x100, 0x7072, 0xfffffffffffffff8, 0x7, 0x5, 0x8, 0x8}, r1, 0x8, r0, 0x2) r2 = gettid() getpriority(0x1, r2) [ 521.050217] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 521.054665] ? __lock_is_held+0xb5/0x140 [ 521.058771] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 521.064334] alloc_pages_current+0x10c/0x210 [ 521.068768] __get_free_pages+0xf/0x40 [ 521.072673] mmu_topup_memory_caches+0x1f8/0x3a0 [ 521.077450] ? kvm_apic_has_interrupt+0xe9/0x230 [ 521.082238] kvm_mmu_load+0x21/0x10e0 [ 521.086066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 521.091633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 521.097198] vcpu_enter_guest+0x3aa6/0x6090 [ 521.101543] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 521.105806] ? kvm_set_msr_common+0x26a0/0x26a0 [ 521.110478] ? zap_class+0x740/0x740 [ 521.114197] ? perf_trace_lock+0x920/0x920 [ 521.118426] ? __lock_acquire+0x7fc/0x5020 [ 521.122723] ? vmx_vcpu_reset+0x1040/0x1040 [ 521.127041] ? graph_lock+0x170/0x170 [ 521.130859] ? __lock_is_held+0xb5/0x140 [ 521.134937] ? lock_acquire+0x1e4/0x540 [ 521.138910] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 521.144034] ? lock_release+0xa30/0xa30 [ 521.147998] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 521.153271] ? kvm_arch_dev_ioctl+0x610/0x610 [ 521.157760] ? preempt_notifier_dec+0x20/0x20 [ 521.162260] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 521.167094] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 521.172466] kvm_vcpu_ioctl+0x7b8/0x1300 [ 521.176523] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 521.182239] ? find_held_lock+0x36/0x1c0 [ 521.186309] ? lock_downgrade+0x8f0/0x8f0 [ 521.190456] ? rcu_is_watching+0x8c/0x150 [ 521.194594] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 521.199008] ? __fget+0x414/0x670 [ 521.202466] ? match_held_lock+0x821/0x8d0 [ 521.206695] ? expand_files.part.8+0x9c0/0x9c0 [ 521.211283] ? kasan_check_write+0x14/0x20 [ 521.215505] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 521.220432] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 521.226135] do_vfs_ioctl+0x1de/0x1720 [ 521.230029] ? ioctl_preallocate+0x300/0x300 [ 521.234430] ? __fget_light+0x2f7/0x440 [ 521.238408] ? fget_raw+0x20/0x20 [ 521.241854] ? __sb_end_write+0xac/0xe0 [ 521.246460] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 521.251992] ? fput+0x130/0x1a0 [ 521.255267] ? ksys_write+0x1ae/0x260 [ 521.259065] ? security_file_ioctl+0x94/0xc0 [ 521.263468] ksys_ioctl+0xa9/0xd0 [ 521.266917] __x64_sys_ioctl+0x73/0xb0 [ 521.270797] do_syscall_64+0x1b9/0x820 [ 521.274672] ? finish_task_switch+0x1d2/0x850 [ 521.279163] ? syscall_return_slowpath+0x5e0/0x5e0 [ 521.284088] ? syscall_return_slowpath+0x31d/0x5e0 [ 521.289019] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 521.294386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 521.299230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 521.304409] RIP: 0033:0x455b29 [ 521.307592] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 521.326986] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.334695] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 521.341964] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 521.349222] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 521.356481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 521.363743] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003c 13:26:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xffffffc0, 0x8}}}}}, 0x0) 13:26:41 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") mount(&(0x7f0000000200)='::,ile:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 13:26:41 executing program 4 (fault-call:7 fault-nth:61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.533812] libceph: parse_ips bad ip '::,ile' 13:26:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="940fbc"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b86030708966efbafc0c66b80e00000066ef640f01c8baf80c66b854cd5f8766efbafc0c66ed66b91e09000066b8627a000066ba000000000f3064653e65660f3a40fe0066b9800000c00f326635000400000f30660ff6fb0f2362260f080f01cf", 0x65}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.645394] FAULT_INJECTION: forcing a failure. [ 521.645394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.657354] CPU: 0 PID: 2282 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 521.664320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.673697] Call Trace: [ 521.676332] dump_stack+0x1c9/0x2b4 [ 521.679967] ? dump_stack_print_info.cold.2+0x52/0x52 [ 521.685169] ? lock_downgrade+0x8f0/0x8f0 [ 521.689334] should_fail.cold.4+0xa/0x1a [ 521.693415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 521.698564] ? graph_lock+0x170/0x170 [ 521.702376] ? is_bpf_text_address+0xd7/0x170 [ 521.706894] ? find_held_lock+0x36/0x1c0 [ 521.710969] ? __lock_is_held+0xb5/0x140 [ 521.715061] ? check_same_owner+0x340/0x340 [ 521.719394] ? rcu_note_context_switch+0x730/0x730 [ 521.724345] __alloc_pages_nodemask+0x36e/0xdb0 [ 521.729024] ? lock_downgrade+0x8f0/0x8f0 [ 521.733211] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 521.738237] ? graph_lock+0x170/0x170 [ 521.742039] ? __lock_is_held+0xb5/0x140 [ 521.746115] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 521.750542] ? __lock_is_held+0xb5/0x140 [ 521.754625] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 521.760185] alloc_pages_current+0x10c/0x210 [ 521.764613] __get_free_pages+0xf/0x40 [ 521.768534] mmu_topup_memory_caches+0x1f8/0x3a0 [ 521.773314] ? kvm_apic_has_interrupt+0xe9/0x230 [ 521.778091] kvm_mmu_load+0x21/0x10e0 [ 521.781890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 521.787436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 521.792966] vcpu_enter_guest+0x3aa6/0x6090 [ 521.797283] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 521.801517] ? kvm_set_msr_common+0x26a0/0x26a0 [ 521.806182] ? perf_trace_lock+0x920/0x920 [ 521.810409] ? __lock_acquire+0x7fc/0x5020 [ 521.814656] ? vmx_vcpu_reset+0x1040/0x1040 [ 521.818966] ? graph_lock+0x170/0x170 [ 521.822757] ? __lock_acquire+0x7fc/0x5020 [ 521.826989] ? __lock_is_held+0xb5/0x140 [ 521.831046] ? lock_acquire+0x1e4/0x540 [ 521.835023] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 521.840040] ? lock_release+0xa30/0xa30 [ 521.844003] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 521.849273] ? kvm_arch_dev_ioctl+0x610/0x610 [ 521.853754] ? preempt_notifier_dec+0x20/0x20 [ 521.858246] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 521.863077] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 521.868090] kvm_vcpu_ioctl+0x7b8/0x1300 [ 521.872144] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 521.877844] ? find_held_lock+0x36/0x1c0 [ 521.881900] ? find_held_lock+0x36/0x1c0 [ 521.885959] ? lock_downgrade+0x8f0/0x8f0 [ 521.890111] ? kasan_check_read+0x11/0x20 [ 521.894246] ? rcu_is_watching+0x8c/0x150 [ 521.898382] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 521.902783] ? __fget+0x414/0x670 [ 521.906225] ? match_held_lock+0x821/0x8d0 [ 521.910446] ? expand_files.part.8+0x9c0/0x9c0 [ 521.915020] ? kasan_check_write+0x14/0x20 [ 521.919259] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 521.924183] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 521.929894] do_vfs_ioctl+0x1de/0x1720 [ 521.933785] ? __lock_is_held+0xb5/0x140 [ 521.937842] ? ioctl_preallocate+0x300/0x300 [ 521.942237] ? __fget_light+0x2f7/0x440 [ 521.946202] ? fget_raw+0x20/0x20 [ 521.949661] ? __sb_end_write+0xac/0xe0 [ 521.953630] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 521.959151] ? fput+0x130/0x1a0 [ 521.962416] ? ksys_write+0x1ae/0x260 [ 521.966212] ? security_file_ioctl+0x94/0xc0 [ 521.970627] ksys_ioctl+0xa9/0xd0 [ 521.974072] __x64_sys_ioctl+0x73/0xb0 [ 521.977949] do_syscall_64+0x1b9/0x820 [ 521.981822] ? finish_task_switch+0x1d2/0x850 [ 521.986305] ? syscall_return_slowpath+0x5e0/0x5e0 [ 521.991223] ? syscall_return_slowpath+0x31d/0x5e0 [ 521.996147] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 522.001501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 522.006338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 522.011525] RIP: 0033:0x455b29 [ 522.014711] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.033983] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.041706] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 522.048965] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 522.056222] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 522.063487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 522.070759] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003d [ 522.082776] binder: BINDER_SET_CONTEXT_MGR already set [ 522.090050] binder: 2232:2289 ioctl 40046207 0 returned -16 13:26:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4, 0x8}}}}}, 0x0) [ 522.099294] binder: 2232:2286 ERROR: BC_REGISTER_LOOPER called without request 13:26:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f0000006fa8)={{0x0, 0x10000000000000}, 0x0, 0x0, 0x0, {0x0, 0x4}, 0x0, 0x2}) 13:26:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x4000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x20003, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xd2) 13:26:42 executing program 4 (fault-call:7 fault-nth:62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:42 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0xfd}}, 0x7}, 0x90) r2 = socket(0xa, 0x1, 0x0) ioperm(0x0, 0x2, 0xffffffffffffff81) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180), 0x0, 0x9}], 0x0, &(0x7f00000002c0)={[{@type={'type', 0x3d, "49ff3c5b"}, 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@creator={'creator', 0x3d, "541fb1b3"}, 0x2c}, {@force='force', 0x2c}, {@nls={'nls', 0x3d, 'maccyrillic'}, 0x2c}]}) 13:26:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xffffff80, 0x8}}}}}, 0x0) [ 522.447727] binder: 2314:2323 ERROR: BC_REGISTER_LOOPER called without request [ 522.480116] hfsplus: unable to find HFS+ superblock [ 522.529882] FAULT_INJECTION: forcing a failure. [ 522.529882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.540168] hfsplus: unable to find HFS+ superblock [ 522.541938] CPU: 1 PID: 2320 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 522.553806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.563190] Call Trace: [ 522.565802] dump_stack+0x1c9/0x2b4 [ 522.569459] ? dump_stack_print_info.cold.2+0x52/0x52 [ 522.574676] ? zap_class+0x740/0x740 [ 522.578420] should_fail.cold.4+0xa/0x1a [ 522.582509] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 522.587644] ? graph_lock+0x170/0x170 [ 522.591478] ? is_bpf_text_address+0xd7/0x170 [ 522.596007] ? find_held_lock+0x36/0x1c0 [ 522.600106] ? __lock_is_held+0xb5/0x140 [ 522.604211] ? check_same_owner+0x340/0x340 [ 522.608552] ? rcu_note_context_switch+0x730/0x730 [ 522.613514] __alloc_pages_nodemask+0x36e/0xdb0 [ 522.618195] ? lock_downgrade+0x8f0/0x8f0 [ 522.622352] ? __alloc_pages_slowpath+0x2d90/0x2d90 13:26:42 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40a000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r1 = gettid() r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x100000001, 0x8000, 0x9, 0xffffffff, 0x0, 0x8, 0x9, 0x3, 0x0, 0x7fff, 0x7f, 0xfffffffffffffffc, 0x6, 0xffffffff7fffffff, 0x10000, 0x3000000, 0xd23c, 0x2, 0x3d0d, 0xfffffffffffffff8, 0xfff, 0x8, 0x2, 0x100000001, 0x401, 0x7, 0x795, 0x6, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x40}, 0x4000, 0x5, 0x8000, 0x3, 0xfdd, 0x3f68, 0x617}, r1, 0x5, r0, 0x8) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/158) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000340)) getsockname$ax25(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000400)={0x100000, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x4, 0x4438, 0x10001, 0x0, 0x12}) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000500)=0x4c2eaf77, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xfffffffffffffff8, 0xc0}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r7, 0x92, 0x2}, &(0x7f0000000600)=0xc) nanosleep(&(0x7f0000000640), &(0x7f0000000680)) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000006c0)=""/216) socketpair(0xc, 0x5, 0xffffffffffff9222, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000800)={r8, 0xffffffffffffffe0}, &(0x7f0000000840)=0x8) vmsplice(r9, &(0x7f0000000940)=[{&(0x7f0000000880)="7a9cf388404f1b70403b224c630c22b8f4a52c992685ea8b8ed014b5615abff58aa1ed3fff5c37a996b111084fe91b93b606f96251d2db27d0c5d8fd5b07edf125dffea0be80f810372a8886", 0x4c}, {&(0x7f0000000900)="9c41a2ec99d409147976d406393502fcdcfc633f63e3b557ff8c7f3b35f265e0", 0x20}], 0x2, 0xa) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000980)={r8, 0x1d, "a989b2a179e09373f9db9818ae179954e2f6c7f4cda957c88e6ab6c45f"}, &(0x7f00000009c0)=0x25) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) fchmod(r10, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={r6, 0x6, 0x1, 0x8e, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000001e80)={&(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000b00)="dfd109673d9803c15a4908965af2df8b498ab1709b58368afccdc2ccd694ce2eb11f188af1b7f8e71bc173bff57fce98af28cd105b0336e915ccc7b69a98ea1c56b2d2d4c536209f89d482ce0c2f97e77dd39565dbc5e87eb75885b8f1a855e985da45ece61436535fce651d9310ff61b0a4ed5d70d533", 0x77}, {&(0x7f0000000b80)="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", 0x1000}], 0x2, &(0x7f0000001dc0)=[@rights={0x30, 0x1, 0x1, [r11, r0, r6, r6, r10, r5, r0, r9]}, @rights={0x28, 0x1, 0x1, [r6, r2, r5, r4, r9]}, @rights={0x20, 0x1, 0x1, [r2, r5, r5]}, @rights={0x28, 0x1, 0x1, [r9, r3, r5, r9, r4]}, @cred={0x20, 0x1, 0x2, r1, r12, r13}], 0xc0, 0x48001}, 0x20000000) 13:26:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x48910, &(0x7f0000000200)="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") [ 522.627374] ? graph_lock+0x170/0x170 [ 522.631181] ? __lock_is_held+0xb5/0x140 [ 522.635257] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 522.639701] ? __lock_is_held+0xb5/0x140 [ 522.643785] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 522.649336] alloc_pages_current+0x10c/0x210 [ 522.653752] __get_free_pages+0xf/0x40 [ 522.657648] mmu_topup_memory_caches+0x1f8/0x3a0 [ 522.662408] ? kvm_apic_has_interrupt+0xe9/0x230 [ 522.667205] kvm_mmu_load+0x21/0x10e0 [ 522.671020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.676585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.682148] vcpu_enter_guest+0x3aa6/0x6090 [ 522.686492] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 522.690755] ? kvm_set_msr_common+0x26a0/0x26a0 [ 522.695445] ? zap_class+0x740/0x740 [ 522.699189] ? perf_trace_lock+0x920/0x920 [ 522.703445] ? __lock_acquire+0x7fc/0x5020 [ 522.707706] ? vmx_vcpu_reset+0x1040/0x1040 [ 522.712052] ? graph_lock+0x170/0x170 [ 522.715894] ? __lock_is_held+0xb5/0x140 [ 522.719978] ? lock_acquire+0x1e4/0x540 [ 522.723967] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 522.729004] ? lock_release+0xa30/0xa30 [ 522.732991] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 522.738283] ? kvm_arch_dev_ioctl+0x610/0x610 [ 522.742793] ? preempt_notifier_dec+0x20/0x20 [ 522.747312] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 522.752175] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 522.757225] kvm_vcpu_ioctl+0x7b8/0x1300 [ 522.761308] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 522.767394] ? find_held_lock+0x36/0x1c0 [ 522.771488] ? lock_downgrade+0x8f0/0x8f0 [ 522.775666] ? rcu_is_watching+0x8c/0x150 [ 522.779836] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 522.784273] ? __fget+0x414/0x670 [ 522.787749] ? match_held_lock+0x821/0x8d0 [ 522.792010] ? expand_files.part.8+0x9c0/0x9c0 [ 522.796613] ? kasan_check_write+0x14/0x20 [ 522.800864] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 522.805820] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 522.811554] do_vfs_ioctl+0x1de/0x1720 [ 522.815465] ? ioctl_preallocate+0x300/0x300 [ 522.819888] ? __fget_light+0x2f7/0x440 [ 522.823892] ? fget_raw+0x20/0x20 [ 522.827361] ? __sb_end_write+0xac/0xe0 [ 522.831356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 522.836907] ? fput+0x130/0x1a0 [ 522.840202] ? ksys_write+0x1ae/0x260 [ 522.844051] ? security_file_ioctl+0x94/0xc0 [ 522.848482] ksys_ioctl+0xa9/0xd0 [ 522.851959] __x64_sys_ioctl+0x73/0xb0 [ 522.855861] do_syscall_64+0x1b9/0x820 [ 522.859761] ? finish_task_switch+0x1d2/0x850 [ 522.864301] ? syscall_return_slowpath+0x5e0/0x5e0 [ 522.869251] ? syscall_return_slowpath+0x31d/0x5e0 [ 522.874205] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 522.879597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 522.884463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 522.889692] RIP: 0033:0x455b29 [ 522.892884] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.912465] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.920200] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 13:26:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4001, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r1, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000580)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="21caf33cf9dd036dd42d013c2ea19f2f49792b5a28a6e70f561aaa9dd00622d090d7043ded2d066fec32cefbd8547c612daad10ad09c270b77acd5fea74913308671ea7b341d47a2175cb9d9ab280aa242fa317d3476081eeb034004989afc4bd1dd529f0d397183a33b40b7208b8b423c624d2eecb96f1a1c15ac54a1b7c9191927eff85125c99f5924ad0d287df23970190004af1c9f1bfb955984340c6119c39f42111aa5c010b2aa86f890fdde5732473114ece8885c951d8afc41d201678ec8a3f0021da691f9f5d951398a0822dfbf24735d8165ae8ac9a01e0c2e82a06fe9f6a99b3aacfa4ba54c7412ada5f347f61231", 0xf4}, {&(0x7f0000000100)="a1a014ad4fa6fff0d1d7cd9321fbd4a7e3968d8e29344be881fe5822ee5d7ad4945d317e126cb4a5f1f66711c668f0", 0x2f}, {&(0x7f0000000140)="a5083983fca15048e3acb7618ad185aa8bb3947fa0aa694ebc1155b7628d8104835a7d6f0f5a3945a28d4f36da33", 0x2e}, {&(0x7f0000001400)="aba7f9d541069126acd791e286be6119d5d5ba367b5acc5ade559f55c5c577da1522387a23c955e5b11a7bb77aacd1aafdad3228efeec5150c606610fdd7af88500a4d05791916abcb22e1d5e06b7a0eba637640dd2205714dab705589d3a4bdf4f3150f7a291e63da1d29dc33bd283771e85d540a4adc3a666b2d72c53c1f93bcdc28d0dde8ad8466df9095e0c30bc579d5273fdc46d6bdfb6183b18b2f3b00b3359676ece2485b5b02e6025a6a5d1d01750c24f57481af24d7029d6d31ca74b7a1d020fc83fd205cdcb980e77e506955dabcfe9932ebb8c701245151150819ea12928707f2148f8c14973999f4a200fac3e9b2ef5b5a7453dd8387832912651b7a28a65f32252e666d818c2fb736e01bd9a83503e3a6c1702602eb0a2ca5706ff0805806827c9ceab559dc42f2cce7c747f133537845b7135ceb858716d4dc21a98231cf3802f69b7d4ae2441a1e529facc327b1a223b9edc5545f09577399f9bda37bd8781f51432afe1063c24528602f33cd3005b5619f3d6b57c9ec2d43538795b2f6c114f6538d5a25c3ea05beede08a35f95adae6f47fe09444fd6226c10e2fac74e9a8f0819ba495cc31f04cb35dbc8e07eac09f8ea233fbef42f3b9b21fff0966c776e93ded7bf29f8bd85b6dac7a215a868c20001c002ddd69e4fef41f7bda0bc8b48b27b0f7ceec8bc202658f5f079ab49708d78227c977c9954314a71390b1e02c3242e7fe7e5c2a0ca8f3aaa35cf248b32387895bde06044c931299eb15e9a9d49c2882ec6bdc8e5b4b79a8737cf957cb5f49a117e4aec89c589a5bc792debdc602c968134d12091a57379f19928c097da483ebb32415b761cafa9981052d42c9d0907ea7da1d6a70496eb4f31fd6a5d2fda6e27fc3d5db9c5a4a99aa569686eb667b1bf5e5049a972af086b084a1bbd62056ba9e58fc737255c83ae6034f1005a509d654c000bf0b1d89384f0dce7a5bf59bf2f12d6870efe43fc86d36b8264d9bbdb87f66b8177964a110740a534302dc546b5f402ebe1e9438967d580a070af20090b1e1f0e92e5ed41b5f5821e186b0edaa6283fd288c7638fb054beae310f30bbd858133d4e697b921cb0805338f510a44856cb0269ec449c4cba0e0f0691000400a435d566da26ece988547d4619b9e4dd33e80e4a7455e0b307b6f0de65774e0dbb1d850c9961c840eb7ed39321adf4cf09676246f36d15f4578c4b138e4110477e3dc4c977da3a2ce84e8d30339f7936ab207c3dbdf39ef0cfaa25342bdb300bec2b5a2c264a23cccfecfdc3dfec266a17dfcd977b8d373b780bca3b1729da19ce2721bc511018c6197a673c9f36b5d355e17735805da2db42885edcb9e20990254f0ad984f1472969d3c6d87edd929104853e55acdec36c26acb6739556aaf90232a347d0c75c3cb76b2e4eeff71e024f6de530ff06d03c7d341cad1074b923f2fb4ee743fd3f5890d35aa829e963fb974c4268e99b6b82a31d07b1ccd3e853724f788810c71c4e525266c10692c016ee7ac415562c1eaa8a34efb60884c951bc0c943e70cd4bd13ca2f0716beda9ba9527a6e94dd3e2f14bf971a6b7402decb4cc083cd63e075bc38c178d5c06d6de37de728e0a9178fb8b82ebd702cbbe4fe4641620e5488ad6b05516eb38b5ecae46d8b52fa5dbf69ceaabb95de0667d6b4b3861631ae57ec05438a3a48355d51c6b29ad4e5c0ab83918fda6f445a72133852c988bdc7b9ce4d8acd58ea7280a05cd72f8d08e3e8bfc92c2328d30209ce0f14e3ea104b539cba6326a288901008088d969c8946465bc71b86b88af7d5c6a024b5ea709929bc10954d9dbf6df93cc0a89fa3d3b308412c42338346405715a6718c3e8b2fa92bc37e74d25771389ec565e3161dbaa2ee1cf02c315f10f9dde25ed1dba0297d2142ca85d5ab4d33af1918e956b92008da09fdae40fa217b5f1ddd2761054dff09381af3266b76b9874a7c725f481727ab159c282a89d50077b140d455ca4f77af15ff8d8f580f798f227f2be8a86d60b829db1338c5276b3a7bbdbd54e916e1cd21bbe3edb0be53576c2ad8f64c030e9d65caf5c21e5a39d534a2ff3251886279087a63dea93beeddc63f15a468f6b6c6c8f0dd0f159d723f63127af2f1aa1fb5bd980961279669aa4b0bee5ba3e3be0b1c7707d8152531adea7ba85cae8bd2a8f36d8e50abf5550b24b8980df04bc6dde49683193be006fb91b05638f3e7269ede68afba711f69675df957e70c77666b958ee6ae28c121c9c1f09a6122927d6e65cfd41a31d1f01ed3c1b2e0cc0d2d45f4849457dcf7e073dece065d958d1591e73ea831df906034d3e204b5fabc062a3b099510f4aafcf0ac4104f46bb9dc0dd03c093993b5d76f5f5d8229b78c39205363fbed18a5a4944fecc313f57d2a738359e229f6a0c3158cf62b51322746f68db8d64f62b29c1fa42daea6592d78cad52642ca828cc71c531bcbe0dc68171b323637d40a651fec2407a224f9f1a422cb1a5e909a746857acee64744fb014ee60782de8678e6c1d5ed2211f09fad0c34fa6b14f0d7376f860854f8e1c590e6438cddcd2ab1e088d5eed4156d4aa191467b2ef6d8cbc8063d3c13d5f1cdca6efcb029083bd7aee787c41e467325f1321cfbc316e3e39ca2956578d24a769ee4489ec875f120797914388ac2279f5ca3ddb422154c4d634a01b7e71da119ece41d31bc2ee7136a606a660218fe4a3e7c9a9afdced822d49c256905721af0da8f8fdfc6e68498d92bacd3038225334ad7cebd838a73b4b55bead39427c33fd5733713299dd4a72ffe1f2b357309f31317e1080df41c61b3ae79b168cf6bd80d88e67fe51cca08304785d2870962f54172c1ac0c590e384f4416c50f04a9159a9cdfddf5224b806afe4146a424e8b317e35aa4466dea6bbe6d84837c96e221898358d4469d0a94748aa9b5fb7a0167fd316de9bab860e99fbcecd7392a94d8b70e20445c1050bfffce3764db32f093c926387d564b71927243a846a9c884bf06b3098d694469470e6b4a4ffb43baf7911e1b2183d33546712bc4adc969c6e40d2afd45e5c5d34cbd1c55072b665c1383dadaa83d5330edb9d0400fe472d064b0f7d588f5e05aea3f60ab2f0f17ab42c7c0dc8d2179f3a3aab667b80110430807aa2007f2f159e1bbe338cb496d70a498f3f721963786eaaa7d3c3f76851eda55c6c87a590d3ecc20ce6289f0bf8af998da8cb7137e48177f263d6df51282369746a9016aedd358819442e2f63e6c7bccd2d26e00849c47b1b3bda3fbc7575d1270bed8094c89043da8a06f7dd229b9be36d5cd00feb5d70649cc6663f93092e9a054d156fb6eb2d8620d670988b9af1ad3cfd62d65c7a7356a9d2dbc203df1d2af2dcb5bdcb468644830da689a6831cb4bbd64a25a1b90a684639f48dd095bedd49af8feae8515df470aa8c326b4687543a61c4cce81ab52fa5878ed1d342682708b03b0693aefc541945e466798d1a6cde3989fe9c3e78cd4d623f1498e3a27105f9503129a6d1ccefee28a38bfafabe55e522d3f3ebd3bbdab1fd8ea876d88a635a3408d4ae14b04e33e4864df5d46e051c649313013584627680c1ba0657928ba539da81721431c0940f02a45cd0e56043c9bde9298a46c77d70ab96e31fef3f5fc0be52bbc45c0eef31705ba6a64f388ccdc15ae4cb2a75a192ee9ba3742a4a6bae9cb06f61e9c1c437fd6fe7215bb5c512a5533bdf6ff270c6bb2ae544bfab1b4f878e6329576a1314294d345e53d437439364872d5f8dbad614acbe1b5242ff401bcee902b504a6f195a34f68d5bbe55a15f8824d2cc2e43c367ff6b76a588023c9d7e71699a5f33bbddb0fd4cbafde14f320bad336d884e16cb26af84a05b5cdcf920d252d724c167bc411f584231d37838591b98e17cb85c411cbcca992b4417f08bfbd980c4c686350e0b38635e7306816b04c19b04c7b118d990452c6957a6941b7f840375367fa75e682655b5dbdd814bb1d7aad41a5143224d773e6df72de5c05e7bed27c1448b6df735f6159c3382cfd62971f0558835d010312d7de1da0ae1df0b15315ac8a9d35311cf5bba2931e2862c4c0a1155f20d85c8ceccb73f0dbdb55249d21d3ac83e6b372e68b23994b097e6432aad0899e1e5c6a4154cb0c24a761b8658598f8b047a188ae130f2c783f4d9e7c6ae5849ed2ea6e22d155110026096e02327cc8d171a4f368bb567f444b3ebf6b80b53e9df939c7a8649be03aa7fe56437f0e87f0ce1fb3214fda6f899d766b6766d9e71083ef3f33b2081fd5e2862938a3fef00b9920070a57802a99beee62209a1e3ba5b808bc3670edc3161305665e95b3f49ea705e38b509417a8ba8445a2776800dd1858875fab8ee77fe6880d68d5e4310e2de22c5808b366ca30c1c270d00abdbe8e6ad6ba966198e741aeb0cb048ca678326f082f3b7130a2e4a15328d3d66690f5c7bcc22e952305325a2359cfa3babcf1bdbccfb5895d1965211ca10ecd6a90a2d5f2d2a64a765410668d54631a2c30456e94f60e1625f0efd2d759f873339c2472ecf45cafbf9bd9290e62b368556cc02d9f343576a84ddf96fbdec9eda7ae16314f0eb842e4e26da3a8d380a90373fb4c0efeecf8ff6767068c111993ba460b2061b3626aa9588b537a1159fb7d367958ab248ec701a2230e480e75d97de7c20479872e205812b05794565b58f94b7a84b79a4b640e7de949deea4002655f97f20b98591f2624cde8f692b9f22c11d39c7ca5962e147838749fd8ee9af5fcdbd675e19a88bc2687c8ce0fd8335b9e72159fbeebff7848335a5efd4616193f7c84369ea9a5b3e79a24d9a790ce4c4d135b22198007a9df23ac0764ffe3d6df9364a49c4294e6630024f398b65683490402374b95df7673b6a78693ace6782d3458457214afc443e1a125ec05831168cd4167a797f0cee8fe9ee9af7812882dc94c1a6ba8255184a203341db275708d618817db32518eee61d2d553a40a4821cf668d62c9f81ca7c91f6c11a9124402e894ce74c38ee2e9a529cfe5f7dd9a5021e77b7c7aa0c728ab91117a8b3eabef8bb56c34ddad64a4506fc2140c99f5f384412d1c352c9eb67c408d5df9c8f2337e4a145a72c9a9c49a39505d6ca002b00112d02eaeb604f7fe61ad43d6dea58e1ce2e1cc61c4227a14eae9682d14d913a62e4c10abae158b4d9ab9f4b03bb4c1455f0f8632c04d6d6ce0c7500f90ac64a59bbacea8678690683015dd4830f103c2c0bdac4fa95e1625c394c4a3731512b3dabdcead2dc6b82167738a20535eaa9c3d8781e44451a8e535c9f9c26c1407308a04963dbbf5004221f7b85332ce7aeb851ccff4063eb7a6bea542eb1c061363545bbe25a8a59e55ef26396ed03b8d90645c9b78efe80c79a0796484ddaf6875d4882b24822abc12b48b824d4d4a5a7ec01cb0f323eda7bea770da6832ecc120dbc42477c290d248f94342be0f0df13f923f1914359405bc0951a7f0b40efd53e0fe77c51c213417154aa958ead77c08ad365ef6b0582706476f231d54c5689295690fedbad6d2d1a94044c1275f53975ec89774ba2cffd52c85f9f7159a4bb450f769a659e51b56637280433ca27f01214051fdbce0be04080803783d2dccd938a157350ccfe5dff3d26df7fe1287285398a8cd2576fa138064b9a03992db2ed3db3027972cebcdbedc5ac80eb9276253a3849de79b18ad4a85f79c291261de8f225e63db6a3fdb9a575c996f650a169ba0f19d9c1c5c46db83d320e6fd6fe5d6", 0x1000}, {&(0x7f0000000300)="4a3d32caad9f8c7fe795467da9dc7c1f1bf36b285afc630394d67a13a6982bc4d645a78fabf2c52250d8bf4e4937b6f67506b1f2a41d4ce74c0731dc57cdf5091131dc5d25291afbba35b7f6912255c105a805c75de7fa4287f23af8638429b0ffbed904b917c1fa61c843511efeca47bd", 0x71}, {&(0x7f0000000380)="274293be4cddb61ae494c47afec41270a94062897ec2e9481996c9ab6a324f1d7f54a6c0de2146eca491d150ef0701b3df20b14bdfe21ecc4aafbb05031b5786e4cfc85cff81d112b8b674634457e3b0c495cc7514f555fbd73a3e590df1", 0x5e}], 0x6, &(0x7f0000000780)=[@rights={0x20, 0x1, 0x1, [r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r2, r2]}], 0x60, 0x8000}, 0x44810) 13:26:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0x44010) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000001800)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001cc0)=""/184, 0xb8}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x2, &(0x7f0000002e00)=""/90, 0x5a}}], 0x1, 0x0, &(0x7f00000037c0)={0x0, 0x1c9c380}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, r3}, 0x14) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)="c2823dc4e00ea40908f663ea006f08d41a2c6d8191a7d911e03bd6345d220da30b3285c526593df55f227f81df08c2052a979be5d6abe44f40a89d") [ 522.927477] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 522.934750] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 522.942019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 522.949291] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003e 13:26:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x7) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") semop(0x0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) semop(0x0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 13:26:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 13:26:43 executing program 4 (fault-call:7 fault-nth:63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x8864000000000000, 0x8}}}}}, 0x0) [ 523.225101] FAULT_INJECTION: forcing a failure. [ 523.225101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.237108] CPU: 0 PID: 2376 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 523.244040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.253883] Call Trace: [ 523.256487] dump_stack+0x1c9/0x2b4 [ 523.260132] ? dump_stack_print_info.cold.2+0x52/0x52 [ 523.265348] ? zap_class+0x740/0x740 [ 523.269096] should_fail.cold.4+0xa/0x1a [ 523.273190] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 523.278317] ? graph_lock+0x170/0x170 [ 523.282143] ? is_bpf_text_address+0xd7/0x170 [ 523.286663] ? find_held_lock+0x36/0x1c0 [ 523.290750] ? __lock_is_held+0xb5/0x140 [ 523.294827] ? check_same_owner+0x340/0x340 [ 523.299159] ? rcu_note_context_switch+0x730/0x730 [ 523.304109] __alloc_pages_nodemask+0x36e/0xdb0 [ 523.308791] ? lock_downgrade+0x8f0/0x8f0 [ 523.312953] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 523.317982] ? graph_lock+0x170/0x170 [ 523.321789] ? __lock_is_held+0xb5/0x140 [ 523.325859] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 523.330307] ? __lock_is_held+0xb5/0x140 [ 523.334389] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 523.339937] alloc_pages_current+0x10c/0x210 [ 523.344354] __get_free_pages+0xf/0x40 [ 523.348453] mmu_topup_memory_caches+0x1f8/0x3a0 [ 523.353225] ? kvm_apic_has_interrupt+0xe9/0x230 [ 523.358214] kvm_mmu_load+0x21/0x10e0 [ 523.362023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.367567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.373116] vcpu_enter_guest+0x3aa6/0x6090 [ 523.377616] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 523.381879] ? kvm_set_msr_common+0x26a0/0x26a0 [ 523.386591] ? zap_class+0x740/0x740 [ 523.390330] ? perf_trace_lock+0x920/0x920 [ 523.394574] ? __lock_acquire+0x7fc/0x5020 [ 523.398812] ? vmx_vcpu_reset+0x1040/0x1040 [ 523.403173] ? graph_lock+0x170/0x170 [ 523.404721] binder: undelivered transaction 408, put_user failed [ 523.407020] ? __lock_is_held+0xb5/0x140 [ 523.407044] ? lock_acquire+0x1e4/0x540 [ 523.407061] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 523.407085] ? lock_release+0xa30/0xa30 [ 523.407098] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 523.407113] ? kvm_arch_dev_ioctl+0x610/0x610 [ 523.407130] ? preempt_notifier_dec+0x20/0x20 [ 523.417944] binder: 2314:2323 ioctl c0306201 200000c0 returned -14 [ 523.421335] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 523.421350] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 523.421378] kvm_vcpu_ioctl+0x7b8/0x1300 [ 523.421399] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 523.421427] ? find_held_lock+0x36/0x1c0 [ 523.421459] ? lock_downgrade+0x8f0/0x8f0 [ 523.454496] binder: BINDER_SET_CONTEXT_MGR already set [ 523.455824] ? rcu_is_watching+0x8c/0x150 [ 523.455841] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 523.455866] ? __fget+0x414/0x670 [ 523.461301] binder: 2314:2323 ioctl 40046207 0 returned -16 [ 523.464930] ? match_held_lock+0x821/0x8d0 [ 523.464954] ? expand_files.part.8+0x9c0/0x9c0 [ 523.464973] ? kasan_check_write+0x14/0x20 [ 523.464991] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 523.465016] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 523.465035] do_vfs_ioctl+0x1de/0x1720 [ 523.465055] ? ioctl_preallocate+0x300/0x300 [ 523.465071] ? __fget_light+0x2f7/0x440 [ 523.465089] ? fget_raw+0x20/0x20 [ 523.480196] binder: 2314:2323 ERROR: BC_REGISTER_LOOPER called without request [ 523.484262] ? __sb_end_write+0xac/0xe0 [ 523.484287] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 523.484301] ? fput+0x130/0x1a0 [ 523.484316] ? ksys_write+0x1ae/0x260 [ 523.484340] ? security_file_ioctl+0x94/0xc0 [ 523.484361] ksys_ioctl+0xa9/0xd0 [ 523.484381] __x64_sys_ioctl+0x73/0xb0 [ 523.484404] do_syscall_64+0x1b9/0x820 [ 523.546602] binder: undelivered TRANSACTION_COMPLETE [ 523.551867] ? syscall_slow_exit_work+0x500/0x500 [ 523.551887] ? syscall_return_slowpath+0x5e0/0x5e0 [ 523.551906] ? syscall_return_slowpath+0x31d/0x5e0 [ 523.551932] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 523.551955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 523.551978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.551989] RIP: 0033:0x455b29 [ 523.551997] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.641698] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.649394] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 523.656663] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 523.663930] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 523.671188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 523.678442] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000003f 13:26:43 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf5ffffff, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0xfffffffffffffffe}, 0x2ca) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7ff, 0xa0201) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x1}) socket$inet6(0xa, 0x800, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 13:26:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4000, 0x8}}}}}, 0x0) 13:26:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/234, 0xea, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) socketpair(0x2, 0x7, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000240)=""/200) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2}, {0x0, @random="1574e012876f"}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'veth1\x00'}) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000500)={r3, 0x5, &(0x7f0000000400)=[0xfffffffffffffff7, 0x7, 0x6, 0xfffffffffffffff8, 0x6b], &(0x7f0000000440)=[0x7, 0xfffffffffffffffc, 0x103, 0x4, 0x3], 0x10, 0x7, 0xadcb, &(0x7f0000000480)=[0x1ff, 0xb5, 0x0, 0x1, 0x2, 0xfc00000, 0xffffffffffffff81], &(0x7f00000004c0)=[0x8, 0x100, 0xced2, 0x6, 0xb409, 0x44ef, 0x0]}) 13:26:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x7000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:43 executing program 4 (fault-call:7 fault-nth:64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.872831] binder: 2399:2400 ERROR: BC_REGISTER_LOOPER called without request 13:26:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) fanotify_mark(r2, 0x28, 0x0, r3, &(0x7f0000000180)='./file0\x00') r4 = getuid() r5 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x3, 0x3d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000cc0], 0x0, &(0x7f0000000000), &(0x7f0000000cc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x4, 0x0, 'ip6gre0\x00', 'ip6tnl0\x00', 'bridge0\x00', 'ifb0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x20ff, 0x0, 0xff], 0xb0, 0x138, 0x188, [@owner={'owner\x00', 0x18, {{r1, r4, r5, r6, 0x2, 0x6}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x13, 0x3}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', 0x9}}}}, {{{0x11, 0x0, 0x0, 'bcsh0\x00', 'ipddp0\x00', 'veth0_to_bond\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xa0, 0xa0, 0xd0, [@pkttype={'pkttype\x00', 0x8, {{0x6}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x2c, 0x17, 'nr0\x00', 'syzkaller1\x00', 'sit0\x00', 'ip6gretap0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x8, 0x400, 0x7}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x448) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl(r8, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getegid() setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x2b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x2, &(0x7f0000000240), &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0x386) 13:26:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x20, 0x4) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) [ 523.991367] FAULT_INJECTION: forcing a failure. [ 523.991367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 524.002739] kernel msg: ebtables bug: please report to author: Wrong len argument [ 524.003449] CPU: 1 PID: 2410 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 524.017811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.027190] Call Trace: [ 524.029812] dump_stack+0x1c9/0x2b4 [ 524.033435] ? dump_stack_print_info.cold.2+0x52/0x52 [ 524.038634] ? zap_class+0x740/0x740 [ 524.042345] should_fail.cold.4+0xa/0x1a [ 524.046400] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 524.051495] ? graph_lock+0x170/0x170 [ 524.055289] ? is_bpf_text_address+0xd7/0x170 [ 524.059782] ? find_held_lock+0x36/0x1c0 [ 524.063846] ? __lock_is_held+0xb5/0x140 [ 524.067912] ? check_same_owner+0x340/0x340 [ 524.072228] ? rcu_note_context_switch+0x730/0x730 [ 524.077160] __alloc_pages_nodemask+0x36e/0xdb0 [ 524.081831] ? lock_downgrade+0x8f0/0x8f0 [ 524.085974] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 524.090978] ? graph_lock+0x170/0x170 [ 524.094768] ? __lock_is_held+0xb5/0x140 [ 524.098820] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 524.103231] ? __lock_is_held+0xb5/0x140 [ 524.107296] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 524.112838] alloc_pages_current+0x10c/0x210 [ 524.117239] __get_free_pages+0xf/0x40 [ 524.121122] mmu_topup_memory_caches+0x1f8/0x3a0 [ 524.125870] ? kvm_apic_has_interrupt+0xe9/0x230 [ 524.130633] kvm_mmu_load+0x21/0x10e0 [ 524.134421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.139952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.145484] vcpu_enter_guest+0x3aa6/0x6090 [ 524.149795] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 524.154040] ? kvm_set_msr_common+0x26a0/0x26a0 [ 524.158701] ? zap_class+0x740/0x740 [ 524.162405] ? perf_trace_lock+0x920/0x920 [ 524.166631] ? __lock_acquire+0x7fc/0x5020 [ 524.170857] ? vmx_vcpu_reset+0x1040/0x1040 [ 524.175169] ? graph_lock+0x170/0x170 [ 524.178976] ? __lock_is_held+0xb5/0x140 [ 524.183038] ? lock_acquire+0x1e4/0x540 [ 524.187003] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 524.192024] ? lock_release+0xa30/0xa30 [ 524.195987] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 524.201263] ? kvm_arch_dev_ioctl+0x610/0x610 [ 524.205749] ? preempt_notifier_dec+0x20/0x20 [ 524.210244] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 524.215079] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 524.220109] kvm_vcpu_ioctl+0x7b8/0x1300 [ 524.224173] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 524.229895] ? find_held_lock+0x36/0x1c0 [ 524.233957] ? lock_downgrade+0x8f0/0x8f0 [ 524.238104] ? rcu_is_watching+0x8c/0x150 [ 524.242247] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 524.246832] ? __fget+0x414/0x670 [ 524.250285] ? match_held_lock+0x821/0x8d0 [ 524.254509] ? expand_files.part.8+0x9c0/0x9c0 [ 524.259081] ? kasan_check_write+0x14/0x20 [ 524.263305] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 524.268231] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 524.273931] do_vfs_ioctl+0x1de/0x1720 [ 524.277828] ? ioctl_preallocate+0x300/0x300 [ 524.282236] ? __fget_light+0x2f7/0x440 [ 524.286204] ? fget_raw+0x20/0x20 [ 524.289650] ? __sb_end_write+0xac/0xe0 [ 524.293616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 524.299142] ? fput+0x130/0x1a0 [ 524.302410] ? ksys_write+0x1ae/0x260 [ 524.306207] ? security_file_ioctl+0x94/0xc0 [ 524.310608] ksys_ioctl+0xa9/0xd0 [ 524.314056] __x64_sys_ioctl+0x73/0xb0 [ 524.317947] do_syscall_64+0x1b9/0x820 [ 524.321824] ? finish_task_switch+0x1d2/0x850 [ 524.326327] ? syscall_return_slowpath+0x5e0/0x5e0 [ 524.331246] ? syscall_return_slowpath+0x31d/0x5e0 [ 524.336169] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 524.341538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 524.346375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.351549] RIP: 0033:0x455b29 [ 524.354721] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.374103] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.381807] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 13:26:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xf0ffffffffffff, 0x8}}}}}, 0x0) [ 524.389070] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 524.396325] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 524.403580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 524.410849] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000040 13:26:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0xbe8a06007507907}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000140)=0x6) 13:26:44 executing program 6: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001380)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x0, 0x2}, &(0x7f0000001440)=0x90) 13:26:44 executing program 4 (fault-call:7 fault-nth:65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x200000000000000, 0x8}}}}}, 0x0) 13:26:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000040)=@ipx, &(0x7f00000000c0)=0xfffffffffffffd8d) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x0, 0x0, 0x7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000140)={0x101, 0x1, 0x4, 0x0, 0x2, 0x9}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/150) [ 524.661818] FAULT_INJECTION: forcing a failure. [ 524.661818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 524.673800] CPU: 1 PID: 2449 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 524.680741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.690108] Call Trace: [ 524.692731] dump_stack+0x1c9/0x2b4 [ 524.696388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 524.701094] binder: undelivered transaction 410, put_user failed [ 524.701592] ? zap_class+0x740/0x740 13:26:44 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) pwrite64(r0, &(0x7f0000000000)="2c22ff0da4b034558629d42ed16e6dd688b02d8d51296e96", 0x18, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f00000002c0)='bpf\x00', 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f0000000440)="2ee566696c653000", 0x0, 0x0, 0x0, 0x0, 0x0) [ 524.701622] should_fail.cold.4+0xa/0x1a [ 524.701644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 524.701663] ? graph_lock+0x170/0x170 [ 524.724454] ? is_bpf_text_address+0xd7/0x170 [ 524.728963] ? find_held_lock+0x36/0x1c0 [ 524.733041] ? __lock_is_held+0xb5/0x140 [ 524.733874] binder: 2399:2400 ioctl c0306201 200000c0 returned -14 [ 524.737132] ? check_same_owner+0x340/0x340 [ 524.737155] ? rcu_note_context_switch+0x730/0x730 [ 524.737187] __alloc_pages_nodemask+0x36e/0xdb0 [ 524.737200] ? lock_downgrade+0x8f0/0x8f0 [ 524.737220] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 524.766599] ? graph_lock+0x170/0x170 [ 524.768627] binder: BINDER_SET_CONTEXT_MGR already set [ 524.770408] ? __lock_is_held+0xb5/0x140 [ 524.770426] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 524.770459] ? __lock_is_held+0xb5/0x140 [ 524.770493] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 524.793801] alloc_pages_current+0x10c/0x210 [ 524.798230] __get_free_pages+0xf/0x40 [ 524.802139] mmu_topup_memory_caches+0x1f8/0x3a0 [ 524.806911] ? kvm_apic_has_interrupt+0xe9/0x230 [ 524.809352] binder: 2399:2400 ioctl 40046207 0 returned -16 [ 524.811681] kvm_mmu_load+0x21/0x10e0 [ 524.811702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.811721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.811741] vcpu_enter_guest+0x3aa6/0x6090 [ 524.811764] ? kvm_set_msr_common+0x26a0/0x26a0 [ 524.841289] ? zap_class+0x740/0x740 [ 524.845014] ? perf_trace_lock+0x920/0x920 [ 524.849261] ? __lock_acquire+0x7fc/0x5020 [ 524.853507] ? vmx_vcpu_reset+0x1040/0x1040 [ 524.855845] binder: 2399:2400 ERROR: BC_REGISTER_LOOPER called without request [ 524.857832] ? graph_lock+0x170/0x170 [ 524.857870] ? __lock_is_held+0xb5/0x140 [ 524.857893] ? lock_acquire+0x1e4/0x540 [ 524.857910] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 524.857932] ? lock_release+0xa30/0xa30 [ 524.886090] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 524.891389] ? kvm_arch_dev_ioctl+0x610/0x610 [ 524.895898] ? preempt_notifier_dec+0x20/0x20 [ 524.900417] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 524.905265] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 524.910301] kvm_vcpu_ioctl+0x7b8/0x1300 [ 524.914387] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 524.920124] ? find_held_lock+0x36/0x1c0 [ 524.924212] ? lock_downgrade+0x8f0/0x8f0 [ 524.927804] binder: undelivered TRANSACTION_COMPLETE [ 524.928372] ? rcu_is_watching+0x8c/0x150 [ 524.928388] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 524.942036] ? __fget+0x414/0x670 [ 524.945485] ? match_held_lock+0x821/0x8d0 [ 524.949710] ? expand_files.part.8+0x9c0/0x9c0 [ 524.954281] ? kasan_check_write+0x14/0x20 [ 524.958503] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 524.963427] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 524.969129] do_vfs_ioctl+0x1de/0x1720 [ 524.973007] ? ioctl_preallocate+0x300/0x300 [ 524.977408] ? __fget_light+0x2f7/0x440 [ 524.981369] ? fget_raw+0x20/0x20 [ 524.984811] ? __sb_end_write+0xac/0xe0 [ 524.988781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 524.994303] ? fput+0x130/0x1a0 [ 524.997573] ? ksys_write+0x1ae/0x260 [ 525.001365] ? security_file_ioctl+0x94/0xc0 [ 525.005763] ksys_ioctl+0xa9/0xd0 [ 525.009207] __x64_sys_ioctl+0x73/0xb0 [ 525.013085] do_syscall_64+0x1b9/0x820 [ 525.016963] ? finish_task_switch+0x1d2/0x850 [ 525.021444] ? syscall_return_slowpath+0x5e0/0x5e0 [ 525.026360] ? syscall_return_slowpath+0x31d/0x5e0 [ 525.031279] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 525.036632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 525.041477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.046653] RIP: 0033:0x455b29 [ 525.049826] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.069125] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.076830] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 525.084519] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 525.091792] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 525.099055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 525.106312] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000041 13:26:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6c00, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000008740)='./file0\x00', 0xe004, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x50, &(0x7f00000000c0)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x5}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, &(0x7f0000000780)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x100}, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x1ff, 0x1ff, 0xffff, 0x1c8c, 0x4, 0x40, 0x800}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000340)=""/121, 0x79}, &(0x7f00000002c0), 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x10001}, &(0x7f00000003c0)=0x4a9dc6e8, &(0x7f0000000400)=0x2, 0x81, 0x9, 0x0, 0x9, 0x20, 0x10001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000440)=""/221, 0xdd}, &(0x7f0000000540), 0x20}}, @cswp={0x58, 0x114, 0x7, {{0xfffffffffffffc01, 0x40000000000000}, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x6, 0x9, 0x1ff, 0x808000000, 0x5, 0x0, 0x8000}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x35fb}, &(0x7f0000000600)=0x6, &(0x7f0000000640)=0x1, 0x9, 0x7, 0x1, 0xfffffffffffffffc, 0x30, 0xffff}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0xff}, &(0x7f0000000680)=0x9, &(0x7f00000006c0)=0x4ce, 0x0, 0x4, 0x5, 0x6, 0x2, 0x7fffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x248753fd, 0x8}, &(0x7f0000000700)=0x400, &(0x7f0000000740)=0x4, 0x8, 0x1000, 0x4, 0x5, 0x44, 0x1}}], 0x288, 0x40001}, 0x24004841) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2, 0x1000, 0x8}, 0xc) mkdirat(r1, &(0x7f0000056ff8)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000060000)='./file0\x00', 0x200) 13:26:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x400000000000000, 0x8}}}}}, 0x0) 13:26:45 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f00000001c0)=""/168, 0xa8, 0x0, &(0x7f0000000080)={0x3, {"e92b1aeba50dd2"}, 0x5}, 0x10) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="0fd1f3c7442400a0000000c744240210270000c7442406000000000f011c24c7442400be000000c7442402900480b0ff2c24c744240000000000c74424029c000000c7442406000000000f011424f040838eed0000000a6409dd420f20df36360f01581dd70fc7acb100480000", 0x6d}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 13:26:45 executing program 4 (fault-call:7 fault-nth:66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.653828] binder: 2496:2498 ERROR: BC_REGISTER_LOOPER called without request 13:26:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x8864, 0x8}}}}}, 0x0) [ 525.761617] FAULT_INJECTION: forcing a failure. [ 525.761617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.773634] CPU: 0 PID: 2495 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 525.780573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.789944] Call Trace: [ 525.792551] dump_stack+0x1c9/0x2b4 [ 525.796199] ? dump_stack_print_info.cold.2+0x52/0x52 [ 525.801405] ? zap_class+0x740/0x740 [ 525.805146] should_fail.cold.4+0xa/0x1a [ 525.809227] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 525.814344] ? graph_lock+0x170/0x170 [ 525.818197] ? is_bpf_text_address+0xd7/0x170 [ 525.822706] ? find_held_lock+0x36/0x1c0 [ 525.826786] ? __lock_is_held+0xb5/0x140 [ 525.830866] ? check_same_owner+0x340/0x340 [ 525.835201] ? rcu_note_context_switch+0x730/0x730 [ 525.840152] __alloc_pages_nodemask+0x36e/0xdb0 [ 525.844826] ? lock_downgrade+0x8f0/0x8f0 [ 525.848991] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 525.854023] ? graph_lock+0x170/0x170 [ 525.857838] ? __lock_is_held+0xb5/0x140 [ 525.861912] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 525.866348] ? __lock_is_held+0xb5/0x140 [ 525.870427] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 525.875978] alloc_pages_current+0x10c/0x210 [ 525.880397] __get_free_pages+0xf/0x40 [ 525.884295] mmu_topup_memory_caches+0x1f8/0x3a0 [ 525.889063] ? kvm_apic_has_interrupt+0xe9/0x230 [ 525.893834] kvm_mmu_load+0x21/0x10e0 [ 525.897643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.903191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.908741] vcpu_enter_guest+0x3aa6/0x6090 [ 525.913078] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 525.917362] ? kvm_set_msr_common+0x26a0/0x26a0 [ 525.922051] ? zap_class+0x740/0x740 [ 525.925783] ? perf_trace_lock+0x920/0x920 [ 525.930033] ? __lock_acquire+0x7fc/0x5020 [ 525.934281] ? vmx_vcpu_reset+0x1040/0x1040 [ 525.938620] ? graph_lock+0x170/0x170 [ 525.942473] ? __lock_is_held+0xb5/0x140 [ 525.946554] ? lock_acquire+0x1e4/0x540 [ 525.950548] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 525.955586] ? lock_release+0xa30/0xa30 [ 525.959565] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 525.964851] ? kvm_arch_dev_ioctl+0x610/0x610 [ 525.969354] ? preempt_notifier_dec+0x20/0x20 [ 525.973867] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 525.978715] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 525.983751] kvm_vcpu_ioctl+0x7b8/0x1300 [ 525.987823] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 525.993559] ? find_held_lock+0x36/0x1c0 [ 525.997641] ? lock_downgrade+0x8f0/0x8f0 [ 526.001805] ? rcu_is_watching+0x8c/0x150 [ 526.005982] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 526.010407] ? __fget+0x414/0x670 [ 526.013871] ? match_held_lock+0x821/0x8d0 [ 526.018112] ? expand_files.part.8+0x9c0/0x9c0 [ 526.022699] ? kasan_check_write+0x14/0x20 [ 526.026948] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 526.031894] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 526.037617] do_vfs_ioctl+0x1de/0x1720 [ 526.041522] ? ioctl_preallocate+0x300/0x300 [ 526.045944] ? __fget_light+0x2f7/0x440 [ 526.049931] ? fget_raw+0x20/0x20 [ 526.053393] ? __sb_end_write+0xac/0xe0 [ 526.057380] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 526.062918] ? fput+0x130/0x1a0 [ 526.066202] ? ksys_write+0x1ae/0x260 [ 526.070015] ? security_file_ioctl+0x94/0xc0 [ 526.074435] ksys_ioctl+0xa9/0xd0 [ 526.077899] __x64_sys_ioctl+0x73/0xb0 [ 526.081795] do_syscall_64+0x1b9/0x820 [ 526.085694] ? syscall_slow_exit_work+0x500/0x500 [ 526.090549] ? syscall_return_slowpath+0x5e0/0x5e0 [ 526.095492] ? syscall_return_slowpath+0x31d/0x5e0 [ 526.100460] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 526.105837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 526.110696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.115890] RIP: 0033:0x455b29 [ 526.119074] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.138558] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.146287] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 526.153564] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 526.160842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 526.168120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 526.175394] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000042 13:26:46 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r1 = getegid() syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0xe001, r0, r1, 0x85e, 0x2010012) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) listen(r2, 0x0) 13:26:46 executing program 4 (fault-call:7 fault-nth:67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x50000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/4096) connect$inet(r0, &(0x7f0000d9dff0)={0x2}, 0x10) sendmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000001e40)=@can={0x1d}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, &(0x7f0000002200)}}], 0x1, 0x40040) 13:26:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x6, 0x8}}}}}, 0x0) 13:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mknod(&(0x7f0000000080)='./file0\x00', 0x200000400001040, 0x0) flistxattr(r0, &(0x7f0000000140)=""/235, 0xeb) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) close(r1) [ 526.434628] FAULT_INJECTION: forcing a failure. [ 526.434628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.446729] CPU: 1 PID: 2532 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 526.453678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.463041] Call Trace: [ 526.465647] dump_stack+0x1c9/0x2b4 [ 526.469297] ? dump_stack_print_info.cold.2+0x52/0x52 [ 526.474517] ? zap_class+0x740/0x740 [ 526.478260] should_fail.cold.4+0xa/0x1a [ 526.482345] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 526.487544] ? graph_lock+0x170/0x170 [ 526.491364] ? is_bpf_text_address+0xd7/0x170 [ 526.495878] ? find_held_lock+0x36/0x1c0 [ 526.499939] ? __lock_is_held+0xb5/0x140 [ 526.504033] ? check_same_owner+0x340/0x340 [ 526.508362] ? rcu_note_context_switch+0x730/0x730 [ 526.513293] __alloc_pages_nodemask+0x36e/0xdb0 [ 526.517954] ? lock_downgrade+0x8f0/0x8f0 [ 526.522096] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 526.527100] ? graph_lock+0x170/0x170 [ 526.530888] ? __lock_is_held+0xb5/0x140 [ 526.534935] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 526.539348] ? __lock_is_held+0xb5/0x140 [ 526.543409] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 526.548939] alloc_pages_current+0x10c/0x210 [ 526.553340] __get_free_pages+0xf/0x40 [ 526.557220] mmu_topup_memory_caches+0x1f8/0x3a0 [ 526.561969] ? kvm_apic_has_interrupt+0xe9/0x230 [ 526.566722] kvm_mmu_load+0x21/0x10e0 [ 526.570513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.576043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.581580] vcpu_enter_guest+0x3aa6/0x6090 [ 526.585891] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 526.590121] ? kvm_set_msr_common+0x26a0/0x26a0 [ 526.594780] ? zap_class+0x740/0x740 [ 526.598491] ? perf_trace_lock+0x920/0x920 [ 526.602718] ? __lock_acquire+0x7fc/0x5020 [ 526.606942] ? vmx_vcpu_reset+0x1040/0x1040 [ 526.611251] ? graph_lock+0x170/0x170 [ 526.615061] ? __lock_is_held+0xb5/0x140 [ 526.619125] ? lock_acquire+0x1e4/0x540 [ 526.623087] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 526.628098] ? lock_release+0xa30/0xa30 [ 526.632060] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 526.637328] ? kvm_arch_dev_ioctl+0x610/0x610 [ 526.641820] ? preempt_notifier_dec+0x20/0x20 [ 526.646314] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 526.651145] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 526.656161] kvm_vcpu_ioctl+0x7b8/0x1300 [ 526.660214] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 526.665922] ? find_held_lock+0x36/0x1c0 [ 526.669981] ? lock_downgrade+0x8f0/0x8f0 [ 526.674126] ? rcu_is_watching+0x8c/0x150 [ 526.678264] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 526.682672] ? __fget+0x414/0x670 [ 526.686117] ? match_held_lock+0x821/0x8d0 [ 526.690341] ? expand_files.part.8+0x9c0/0x9c0 [ 526.694913] ? kasan_check_write+0x14/0x20 [ 526.699135] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 526.704060] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 526.709763] do_vfs_ioctl+0x1de/0x1720 [ 526.713646] ? ioctl_preallocate+0x300/0x300 [ 526.718047] ? __fget_light+0x2f7/0x440 [ 526.722029] ? fget_raw+0x20/0x20 [ 526.725485] ? __sb_end_write+0xac/0xe0 [ 526.729453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 526.734982] ? fput+0x130/0x1a0 [ 526.738251] ? ksys_write+0x1ae/0x260 [ 526.742048] ? security_file_ioctl+0x94/0xc0 [ 526.746451] ksys_ioctl+0xa9/0xd0 [ 526.749896] __x64_sys_ioctl+0x73/0xb0 [ 526.753776] do_syscall_64+0x1b9/0x820 [ 526.757650] ? finish_task_switch+0x1d2/0x850 [ 526.762134] ? syscall_return_slowpath+0x5e0/0x5e0 [ 526.767055] ? syscall_return_slowpath+0x31d/0x5e0 [ 526.771978] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 526.777335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 526.782172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.787349] RIP: 0033:0x455b29 [ 526.790532] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.809896] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.817595] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 526.824850] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x115c, &(0x7f0000000500)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x7, 0xff, 0x114e, 0x66, 0x8001, 0x5, 0x9f, 0x0, @multicast2=0xe0000002, @rand_addr=0x24e, {[@rr={0x7, 0x7, 0x8, [@empty]}]}}, @gre={{0x0, 0x0, 0x1, 0x2, 0x0, 0x1000, 0x0, 0x1, 0x880b, 0x2, 0x3, [0x3aa6, 0x7], "be43"}, {0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, [0x7f, 0xcc0], "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"}, {0x8, 0x0, 0x6, 0x81, 0x0, 0x0, 0x86dd, [0x0, 0x5], "33a58331723963af226ca53da5f2c351d333531e955a1d5c1a5b8042a08484b3e5f34924188b291edad0612c803bc8cdd65af0b9bc59a5f14b46dc24fc8232626f99cc38f380fe458c3203ccdca92afc3b97f69f87b20061eefe0311d2b2d4582e5ed20f99b1163b5c3ca154a1d8f4efcda66d6138408626de2e7c01368b851f3c5424429313a89cb24c5fae"}, {0x8, 0x88be, 0x2, {{0x54, 0x1, 0x7ed, 0x6, 0x40, 0x1ff, 0x7fffffff, 0x3}, 0x1, 0x9}}, {0x8, 0x22eb, 0x0, {{0xf9, 0x2, 0x0, 0x1, 0x2e7b60e5, 0x6, 0x3ff}, 0x2, 0xc0b, 0x25d, 0x81, 0xfffffffffffffff8, 0x1ff, 0x5, 0x8, 0x8, 0x5}}, {0x8, 0x6558, 0x1, "7129211eef0757974c1386f3640b296d4d107281a8dd3a71643a11d66ed30ad1c32f29b9956edbbb9f7c5c9f48c01dbf21a1e7a886df026c77990a4e7777cb5c50242076eeaa6294798cf6e62e3c540f68049d84"}}}}}}, &(0x7f0000000080)={0x0, 0x4, [0x644, 0x4aa, 0x155, 0xb5d]}) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e891dcd824fc9e4e54cadcff7244bc8f5f213d715ab26e0a4e2de", 0x21}], 0x1, &(0x7f0000000480)}, 0x0) 13:26:46 executing program 3: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) fallocate(r0, 0x10, 0x0, 0xc105) r1 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='selfppp1!@\x00', 0xfffffffffffffffe) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) keyctl$chown(0x4, r1, r2, r3) [ 526.832106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 526.839365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 526.846633] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000043 13:26:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 526.959587] binder: 2561:2566 ERROR: BC_REGISTER_LOOPER called without request 13:26:47 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3e8, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:47 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105517, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x1b4) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x3, 0x6}) 13:26:47 executing program 4 (fault-call:7 fault-nth:68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x2c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 13:26:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x3, 0x8}}}}}, 0x0) 13:26:47 executing program 3: r0 = socket$packet(0x11, 0x800000000002, 0x300) umount2(&(0x7f0000000000)='./file0\x00', 0xf) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0xe0000002}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000200)) 13:26:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 527.480510] FAULT_INJECTION: forcing a failure. [ 527.480510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.492495] CPU: 1 PID: 2584 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 527.499433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.508800] Call Trace: [ 527.511405] dump_stack+0x1c9/0x2b4 [ 527.515057] ? dump_stack_print_info.cold.2+0x52/0x52 [ 527.520273] ? zap_class+0x740/0x740 [ 527.523999] should_fail.cold.4+0xa/0x1a [ 527.528065] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 527.533156] ? graph_lock+0x170/0x170 [ 527.536946] ? is_bpf_text_address+0xd7/0x170 [ 527.541430] ? find_held_lock+0x36/0x1c0 [ 527.545484] ? __lock_is_held+0xb5/0x140 [ 527.549541] ? check_same_owner+0x340/0x340 [ 527.553852] ? rcu_note_context_switch+0x730/0x730 [ 527.558782] __alloc_pages_nodemask+0x36e/0xdb0 [ 527.563437] ? lock_downgrade+0x8f0/0x8f0 [ 527.567574] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 527.572578] ? graph_lock+0x170/0x170 [ 527.576373] ? __lock_is_held+0xb5/0x140 [ 527.580418] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 527.584821] ? __lock_is_held+0xb5/0x140 [ 527.588879] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 527.594411] alloc_pages_current+0x10c/0x210 [ 527.598811] __get_free_pages+0xf/0x40 [ 527.602688] mmu_topup_memory_caches+0x1f8/0x3a0 [ 527.607430] ? kvm_apic_has_interrupt+0xe9/0x230 [ 527.612175] kvm_mmu_load+0x21/0x10e0 [ 527.615966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.621490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.627027] vcpu_enter_guest+0x3aa6/0x6090 [ 527.631341] ? kvm_set_msr_common+0x26a0/0x26a0 [ 527.636000] ? vmx_vcpu_load+0xadf/0xff0 [ 527.640058] ? vmx_vcpu_reset+0x1040/0x1040 [ 527.644368] ? graph_lock+0x170/0x170 [ 527.648167] ? __lock_is_held+0xb5/0x140 [ 527.652218] ? lock_acquire+0x1e4/0x540 [ 527.656179] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 527.661185] ? lock_release+0xa30/0xa30 [ 527.665145] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 527.670428] ? kvm_arch_dev_ioctl+0x610/0x610 [ 527.674916] ? preempt_notifier_dec+0x20/0x20 [ 527.679410] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 527.684236] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 527.689246] kvm_vcpu_ioctl+0x7b8/0x1300 [ 527.693296] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 527.699002] ? find_held_lock+0x36/0x1c0 [ 527.703066] ? lock_downgrade+0x8f0/0x8f0 [ 527.707205] ? rcu_is_watching+0x8c/0x150 [ 527.711339] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 527.715740] ? __fget+0x414/0x670 [ 527.719183] ? match_held_lock+0x821/0x8d0 [ 527.723410] ? expand_files.part.8+0x9c0/0x9c0 [ 527.727977] ? kasan_check_read+0x11/0x20 [ 527.732229] ? rcu_is_watching+0x8c/0x150 [ 527.736467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 527.742124] ? rcu_pm_notify+0xc0/0xc0 [ 527.746104] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 527.752067] do_vfs_ioctl+0x1de/0x1720 [ 527.756044] ? ioctl_preallocate+0x300/0x300 [ 527.760447] ? __fget_light+0x2f7/0x440 [ 527.764429] ? fget_raw+0x20/0x20 [ 527.767926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.774446] ? syscall_slow_exit_work+0x111/0x500 [ 527.780083] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 527.784755] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 527.790295] ? security_file_ioctl+0x94/0xc0 [ 527.794698] ksys_ioctl+0xa9/0xd0 [ 527.798766] __x64_sys_ioctl+0x73/0xb0 [ 527.802662] do_syscall_64+0x1b9/0x820 [ 527.806636] ? finish_task_switch+0x1d2/0x850 [ 527.811312] ? syscall_return_slowpath+0x5e0/0x5e0 [ 527.816251] ? syscall_return_slowpath+0x31d/0x5e0 [ 527.821198] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 527.826570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 527.831418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 527.836611] RIP: 0033:0x455b29 [ 527.839786] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.859249] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.867122] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 527.874769] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="00000000000076f5f743002ec66daa00", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)={{0x5d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, "", [[], [], [], [], []]}, 0x520) 13:26:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x200000088) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x7ff, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x1f, 0x25fba5df, 0x7, 'queue1\x00', 0x1ff}) recvfrom$inet6(r0, &(0x7f0000000000)=""/4, 0x798c2e70f51d0cc3, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x709000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 13:26:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002800000000001414aa44040500000000000401907800e5704400cd98e8"], &(0x7f0000000100)) [ 527.882033] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 527.889304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 527.896562] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000044 [ 527.911580] binder: BINDER_SET_CONTEXT_MGR already set [ 527.925792] binder: 2561:2566 ioctl 40046207 0 returned -16 [ 527.963837] binder: 2561:2566 ERROR: BC_REGISTER_LOOPER called without request 13:26:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) 13:26:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xffffdd86, 0x8}}}}}, 0x0) 13:26:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0xfeffffff00000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:48 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r0, 0x0) r2 = getpgid(0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000280)={{0x2, 0x4, 0x400, 0x4, 'syz1\x00', 0x401}, 0x3, 0x4, 0xd4bd, r2, 0x1, 0x2b50755, 'syz1\x00', &(0x7f0000000040)=['\x00'], 0x1, [], [0x401, 0x100000000, 0x2, 0x21b1]}) tkill(r2, 0x15) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 13:26:48 executing program 4 (fault-call:7 fault-nth:69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.054215] binder: undelivered TRANSACTION_COMPLETE 13:26:48 executing program 6: r0 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0xfffff, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, r0) [ 528.189418] FAULT_INJECTION: forcing a failure. [ 528.189418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.201455] CPU: 0 PID: 2621 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 528.208409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.217779] Call Trace: [ 528.220391] dump_stack+0x1c9/0x2b4 [ 528.224059] ? dump_stack_print_info.cold.2+0x52/0x52 [ 528.229281] ? zap_class+0x740/0x740 [ 528.233032] should_fail.cold.4+0xa/0x1a [ 528.237127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 528.242261] ? graph_lock+0x170/0x170 [ 528.246094] ? is_bpf_text_address+0xd7/0x170 [ 528.250625] ? find_held_lock+0x36/0x1c0 [ 528.252246] binder: 2632:2633 ERROR: BC_REGISTER_LOOPER called without request [ 528.254827] ? __lock_is_held+0xb5/0x140 [ 528.254862] ? check_same_owner+0x340/0x340 [ 528.254884] ? rcu_note_context_switch+0x730/0x730 [ 528.254918] __alloc_pages_nodemask+0x36e/0xdb0 [ 528.280270] ? lock_downgrade+0x8f0/0x8f0 [ 528.284455] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 528.289596] ? graph_lock+0x170/0x170 [ 528.293421] ? __lock_is_held+0xb5/0x140 [ 528.297512] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 528.301962] ? __lock_is_held+0xb5/0x140 [ 528.306064] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 528.311636] alloc_pages_current+0x10c/0x210 [ 528.316074] __get_free_pages+0xf/0x40 [ 528.320093] mmu_topup_memory_caches+0x1f8/0x3a0 [ 528.324866] ? kvm_apic_has_interrupt+0xe9/0x230 [ 528.329672] kvm_mmu_load+0x21/0x10e0 [ 528.333496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.339067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.344634] vcpu_enter_guest+0x3aa6/0x6090 [ 528.348981] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 528.353241] ? kvm_set_msr_common+0x26a0/0x26a0 [ 528.357938] ? zap_class+0x740/0x740 [ 528.361685] ? perf_trace_lock+0x920/0x920 [ 528.365943] ? __lock_acquire+0x7fc/0x5020 [ 528.370198] ? vmx_vcpu_reset+0x1040/0x1040 [ 528.374536] ? graph_lock+0x170/0x170 [ 528.378371] ? __lock_is_held+0xb5/0x140 [ 528.382460] ? lock_acquire+0x1e4/0x540 [ 528.386453] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 528.391494] ? lock_release+0xa30/0xa30 [ 528.395486] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 528.400775] ? kvm_arch_dev_ioctl+0x610/0x610 [ 528.405273] ? preempt_notifier_dec+0x20/0x20 [ 528.409786] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 528.414635] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 528.419669] kvm_vcpu_ioctl+0x7b8/0x1300 [ 528.423740] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 528.429474] ? find_held_lock+0x36/0x1c0 [ 528.433568] ? lock_downgrade+0x8f0/0x8f0 [ 528.437820] ? rcu_is_watching+0x8c/0x150 [ 528.441980] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 528.446440] ? __fget+0x414/0x670 [ 528.449912] ? match_held_lock+0x821/0x8d0 [ 528.454166] ? expand_files.part.8+0x9c0/0x9c0 [ 528.458766] ? kasan_check_write+0x14/0x20 [ 528.463019] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 528.467979] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 528.473698] do_vfs_ioctl+0x1de/0x1720 [ 528.477600] ? ioctl_preallocate+0x300/0x300 [ 528.482017] ? __fget_light+0x2f7/0x440 [ 528.486001] ? fget_raw+0x20/0x20 [ 528.489467] ? __sb_end_write+0xac/0xe0 [ 528.493463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 528.499006] ? fput+0x130/0x1a0 [ 528.502294] ? ksys_write+0x1ae/0x260 [ 528.506108] ? security_file_ioctl+0x94/0xc0 [ 528.510539] ksys_ioctl+0xa9/0xd0 [ 528.514007] __x64_sys_ioctl+0x73/0xb0 [ 528.517907] do_syscall_64+0x1b9/0x820 [ 528.521820] ? finish_task_switch+0x1d2/0x850 [ 528.526322] ? syscall_return_slowpath+0x5e0/0x5e0 [ 528.531344] ? syscall_return_slowpath+0x31d/0x5e0 [ 528.536285] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 528.541847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 528.546804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.552014] RIP: 0033:0x455b29 [ 528.555403] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.575150] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.582861] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 528.590220] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 528.597483] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 528.604779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 528.612417] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000045 13:26:48 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffff8d, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80200, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'rose0\x00'}}) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0x4) 13:26:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xd00000000000000, 0x8}}}}}, 0x0) 13:26:48 executing program 4 (fault-call:7 fault-nth:70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:48 executing program 1: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xa9, 0x4200) accept4$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x210a032, &(0x7f0000000080)={[{@nouser_xattr='nouser_xattr', 0x2c}]}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)) [ 528.975377] FAULT_INJECTION: forcing a failure. [ 528.975377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.987417] CPU: 1 PID: 2646 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 528.994360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.003822] Call Trace: [ 529.006436] dump_stack+0x1c9/0x2b4 [ 529.010096] ? dump_stack_print_info.cold.2+0x52/0x52 [ 529.015318] ? zap_class+0x740/0x740 [ 529.019089] should_fail.cold.4+0xa/0x1a [ 529.023183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 529.028400] ? graph_lock+0x170/0x170 [ 529.032348] ? is_bpf_text_address+0xd7/0x170 [ 529.036913] ? find_held_lock+0x36/0x1c0 [ 529.041100] ? __lock_is_held+0xb5/0x140 [ 529.045200] ? check_same_owner+0x340/0x340 [ 529.049547] ? rcu_note_context_switch+0x730/0x730 [ 529.050385] binder: undelivered transaction 415, put_user failed [ 529.054625] __alloc_pages_nodemask+0x36e/0xdb0 [ 529.054646] ? lock_downgrade+0x8f0/0x8f0 [ 529.054669] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 529.054687] ? graph_lock+0x170/0x170 [ 529.067824] binder: 2632:2633 ioctl c0306201 200000c0 returned -14 [ 529.069681] ? __lock_is_held+0xb5/0x140 [ 529.069700] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 529.069734] ? __lock_is_held+0xb5/0x140 [ 529.069761] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 529.087214] binder: BINDER_SET_CONTEXT_MGR already set [ 529.089813] alloc_pages_current+0x10c/0x210 [ 529.089835] __get_free_pages+0xf/0x40 [ 529.089854] mmu_topup_memory_caches+0x1f8/0x3a0 [ 529.089875] ? kvm_apic_has_interrupt+0xe9/0x230 [ 529.094457] binder: 2632:2633 ioctl 40046207 0 returned -16 [ 529.098360] kvm_mmu_load+0x21/0x10e0 [ 529.098380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.098400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.098418] vcpu_enter_guest+0x3aa6/0x6090 [ 529.098439] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 529.104791] binder: 2632:2633 ERROR: BC_REGISTER_LOOPER called without request [ 529.109626] ? kvm_set_msr_common+0x26a0/0x26a0 [ 529.109646] ? zap_class+0x740/0x740 [ 529.109668] ? perf_trace_lock+0x920/0x920 [ 529.109687] ? __lock_acquire+0x7fc/0x5020 [ 529.109708] ? vmx_vcpu_reset+0x1040/0x1040 [ 529.130361] binder: undelivered TRANSACTION_COMPLETE [ 529.133306] ? graph_lock+0x170/0x170 [ 529.133343] ? __lock_is_held+0xb5/0x140 [ 529.133363] ? lock_acquire+0x1e4/0x540 [ 529.212044] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 529.217845] ? lock_release+0xa30/0xa30 [ 529.221816] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 529.227080] ? kvm_arch_dev_ioctl+0x610/0x610 [ 529.232082] ? preempt_notifier_dec+0x20/0x20 [ 529.236571] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 529.241412] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 529.246441] kvm_vcpu_ioctl+0x7b8/0x1300 [ 529.250499] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 529.256301] ? find_held_lock+0x36/0x1c0 [ 529.260362] ? lock_downgrade+0x8f0/0x8f0 [ 529.264501] ? rcu_is_watching+0x8c/0x150 [ 529.268646] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 529.273054] ? __fget+0x414/0x670 [ 529.276496] ? match_held_lock+0x821/0x8d0 [ 529.280723] ? expand_files.part.8+0x9c0/0x9c0 [ 529.285303] ? kasan_check_write+0x14/0x20 [ 529.289524] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 529.294445] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 529.300144] do_vfs_ioctl+0x1de/0x1720 [ 529.304035] ? ioctl_preallocate+0x300/0x300 [ 529.308448] ? __fget_light+0x2f7/0x440 [ 529.312412] ? fget_raw+0x20/0x20 [ 529.315865] ? __sb_end_write+0xac/0xe0 [ 529.319832] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 529.325382] ? fput+0x130/0x1a0 [ 529.328651] ? ksys_write+0x1ae/0x260 [ 529.332447] ? security_file_ioctl+0x94/0xc0 [ 529.336856] ksys_ioctl+0xa9/0xd0 [ 529.340302] __x64_sys_ioctl+0x73/0xb0 [ 529.344179] do_syscall_64+0x1b9/0x820 [ 529.348053] ? finish_task_switch+0x1d2/0x850 [ 529.352543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 529.357472] ? syscall_return_slowpath+0x31d/0x5e0 [ 529.362403] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 529.367766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 529.372608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 529.377795] RIP: 0033:0x455b29 [ 529.380966] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 529.400271] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.407967] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 529.415227] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x2000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:49 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond_slave_0\x00', 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10080}, 0xc) 13:26:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x6b, 0x3ff, 0x7f}, 0x2c) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x8001) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000140)=0x5, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000380)="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") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socketpair(0xf, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$ax25_int(r1, 0x101, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 529.422491] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 529.429744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 529.437004] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000046 13:26:49 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)={0x1, 0x1}) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x9, 0xc41, 0x2, 0x1}]}) 13:26:49 executing program 4 (fault-call:7 fault-nth:71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 529.521841] binder: 2678:2681 ERROR: BC_REGISTER_LOOPER called without request 13:26:49 executing program 1: r0 = getpid() r1 = msgget$private(0x0, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) exit(0x0) socketpair$inet(0x2, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x3332b311, 0x9, 0x400, "b129b60fdfc9196301f4a4acd9d48514bb690ee684399866ebcdaa8d8b0a4cf20157e6346ed7b28dc347527599e5269ed496f66ac1c5bc76fca1c9b472568e38f4cb7abc2d24f5c23dda13b04e8d9465"}, 0xd8) msgrcv(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) 13:26:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0xd00, 0x8}}}}}, 0x0) 13:26:49 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$netlink(r1, &(0x7f0000000640)={0x0, 0x26f, &(0x7f00000005c0), 0x162, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) [ 529.672116] audit: type=1326 audit(1528982809.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=2690 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0x0 [ 529.688430] FAULT_INJECTION: forcing a failure. [ 529.688430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.703345] CPU: 1 PID: 2687 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 529.710282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.719645] Call Trace: [ 529.722256] dump_stack+0x1c9/0x2b4 [ 529.725909] ? dump_stack_print_info.cold.2+0x52/0x52 [ 529.731125] ? lock_downgrade+0x8f0/0x8f0 [ 529.735301] should_fail.cold.4+0xa/0x1a [ 529.739389] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 529.744513] ? graph_lock+0x170/0x170 [ 529.748336] ? is_bpf_text_address+0xd7/0x170 [ 529.752857] ? find_held_lock+0x36/0x1c0 [ 529.756941] ? __lock_is_held+0xb5/0x140 [ 529.761035] ? check_same_owner+0x340/0x340 [ 529.765369] ? rcu_note_context_switch+0x730/0x730 [ 529.770323] __alloc_pages_nodemask+0x36e/0xdb0 [ 529.775001] ? lock_downgrade+0x8f0/0x8f0 [ 529.779149] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 529.784156] ? graph_lock+0x170/0x170 [ 529.787954] ? __lock_is_held+0xb5/0x140 [ 529.792029] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 529.796440] ? __lock_is_held+0xb5/0x140 [ 529.800533] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 529.806075] alloc_pages_current+0x10c/0x210 [ 529.810481] __get_free_pages+0xf/0x40 [ 529.814365] mmu_topup_memory_caches+0x1f8/0x3a0 [ 529.819110] ? kvm_apic_has_interrupt+0xe9/0x230 [ 529.823862] kvm_mmu_load+0x21/0x10e0 [ 529.827656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.833187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.838730] vcpu_enter_guest+0x3aa6/0x6090 [ 529.843047] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 529.847290] ? kvm_set_msr_common+0x26a0/0x26a0 [ 529.851962] ? perf_trace_lock+0x920/0x920 [ 529.856191] ? __lock_acquire+0x7fc/0x5020 [ 529.860430] ? vmx_vcpu_reset+0x1040/0x1040 [ 529.864741] ? graph_lock+0x170/0x170 [ 529.868533] ? __lock_acquire+0x7fc/0x5020 [ 529.872778] ? __lock_is_held+0xb5/0x140 [ 529.876836] ? lock_acquire+0x1e4/0x540 [ 529.880803] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 529.885815] ? lock_release+0xa30/0xa30 [ 529.889777] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 529.895042] ? kvm_arch_dev_ioctl+0x610/0x610 [ 529.899542] ? preempt_notifier_dec+0x20/0x20 [ 529.904044] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 529.908890] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 529.913915] kvm_vcpu_ioctl+0x7b8/0x1300 [ 529.917976] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 529.923680] ? find_held_lock+0x36/0x1c0 [ 529.927743] ? find_held_lock+0x36/0x1c0 [ 529.931805] ? lock_downgrade+0x8f0/0x8f0 [ 529.935949] ? kasan_check_read+0x11/0x20 [ 529.940087] ? rcu_is_watching+0x8c/0x150 [ 529.944224] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 529.948632] ? __fget+0x414/0x670 [ 529.952090] ? match_held_lock+0x821/0x8d0 [ 529.956318] ? expand_files.part.8+0x9c0/0x9c0 [ 529.960891] ? kasan_check_write+0x14/0x20 [ 529.965116] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 529.970044] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 529.975763] do_vfs_ioctl+0x1de/0x1720 [ 529.979640] ? __lock_is_held+0xb5/0x140 [ 529.983703] ? ioctl_preallocate+0x300/0x300 [ 529.988101] ? __fget_light+0x2f7/0x440 [ 529.992164] ? fget_raw+0x20/0x20 [ 529.995613] ? __sb_end_write+0xac/0xe0 [ 529.999580] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 530.005104] ? fput+0x130/0x1a0 [ 530.008381] ? ksys_write+0x1ae/0x260 [ 530.012178] ? security_file_ioctl+0x94/0xc0 [ 530.016582] ksys_ioctl+0xa9/0xd0 [ 530.020035] __x64_sys_ioctl+0x73/0xb0 [ 530.023919] do_syscall_64+0x1b9/0x820 [ 530.027793] ? finish_task_switch+0x1d2/0x850 [ 530.032281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 530.037203] ? syscall_return_slowpath+0x31d/0x5e0 [ 530.042129] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 530.047497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 530.052351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 530.057530] RIP: 0033:0x455b29 13:26:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x5d3016e65f58e6c3) getpeername(r1, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0x40, 0x5, 0xff, 0x3}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 530.060704] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 530.080080] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.087782] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 530.095041] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 530.102308] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 530.109568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 530.116825] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000047 13:26:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 530.313464] binder: undelivered transaction 417, put_user failed [ 530.320479] binder: 2678:2681 ioctl c0306201 200000c0 returned -14 [ 530.328851] binder: BINDER_SET_CONTEXT_MGR already set [ 530.334410] binder: 2678:2681 ioctl 40046207 0 returned -16 [ 530.340648] binder: 2678:2681 ERROR: BC_REGISTER_LOOPER called without request [ 530.395248] binder: undelivered TRANSACTION_COMPLETE 13:26:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x543}}}}}, 0x0) 13:26:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x3, 0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f0000000180)="90c7d9806dc2a0b84980a97b192bbd583c3f04228d4cf050becc150f2c2910c6c83bace228f49257e4e2f7a265d9fa811ebb226871667b996debc24408e4c93d4f36394de46c9c76a0efd8", 0x4b) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x51}}) r3 = fcntl$getown(r1, 0x9) sched_getattr(r3, &(0x7f0000000140), 0x30, 0x0) close(0xffffffffffffffff) close(r1) 13:26:50 executing program 4 (fault-call:7 fault-nth:72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:50 executing program 3: syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt(r0, 0x2, 0x3, &(0x7f0000002400)=""/191, &(0x7f00000003c0)=0xbf) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000024c0)={0x0}, &(0x7f0000002580)=0xc) process_vm_writev(r1, &(0x7f0000002500)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000002e40)=""/236, 0xec}, {&(0x7f0000000300)=""/167, 0xa7}], 0x10000323, &(0x7f0000002c00), 0x9, 0x0) 13:26:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x700000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x13, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000180)="4cd35fb17d824b761208d2fa236f965827ead8e5c43bf49137a69bcf082fa84acda1998c7a34d11ee42d02394b5bd82c170d7ef4d482b64c", 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 530.627707] binder: 2729:2734 ERROR: BC_REGISTER_LOOPER called without request [ 530.697477] FAULT_INJECTION: forcing a failure. [ 530.697477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 530.709543] CPU: 0 PID: 2728 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 530.716484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.725847] Call Trace: [ 530.728458] dump_stack+0x1c9/0x2b4 [ 530.732097] ? dump_stack_print_info.cold.2+0x52/0x52 [ 530.737301] ? zap_class+0x740/0x740 [ 530.741050] should_fail.cold.4+0xa/0x1a [ 530.745116] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 530.750226] ? graph_lock+0x170/0x170 [ 530.754033] ? is_bpf_text_address+0xd7/0x170 [ 530.758536] ? find_held_lock+0x36/0x1c0 [ 530.762606] ? __lock_is_held+0xb5/0x140 [ 530.766689] ? check_same_owner+0x340/0x340 [ 530.771015] ? rcu_note_context_switch+0x730/0x730 [ 530.775998] __alloc_pages_nodemask+0x36e/0xdb0 [ 530.780670] ? lock_downgrade+0x8f0/0x8f0 [ 530.784829] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 530.789851] ? graph_lock+0x170/0x170 [ 530.793657] ? __lock_is_held+0xb5/0x140 [ 530.797724] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 530.802158] ? __lock_is_held+0xb5/0x140 [ 530.806241] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 530.811798] alloc_pages_current+0x10c/0x210 [ 530.816222] __get_free_pages+0xf/0x40 [ 530.820116] mmu_topup_memory_caches+0x1f8/0x3a0 [ 530.824874] ? kvm_apic_has_interrupt+0xe9/0x230 [ 530.829640] kvm_mmu_load+0x21/0x10e0 [ 530.833449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 530.839001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 530.844554] vcpu_enter_guest+0x3aa6/0x6090 [ 530.848882] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 530.853132] ? kvm_set_msr_common+0x26a0/0x26a0 [ 530.857810] ? zap_class+0x740/0x740 [ 530.861531] ? vmx_vcpu_load+0xadf/0xff0 [ 530.865597] ? __lock_acquire+0x7fc/0x5020 [ 530.869839] ? vmx_vcpu_reset+0x1040/0x1040 [ 530.874195] ? graph_lock+0x170/0x170 [ 530.878022] ? __lock_is_held+0xb5/0x140 [ 530.882098] ? lock_acquire+0x1e4/0x540 [ 530.886072] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 530.891111] ? lock_release+0xa30/0xa30 [ 530.895093] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 530.900380] ? kvm_arch_dev_ioctl+0x610/0x610 [ 530.904893] ? preempt_notifier_dec+0x20/0x20 [ 530.909426] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 530.914284] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 530.919322] kvm_vcpu_ioctl+0x7b8/0x1300 [ 530.923406] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 530.929141] ? find_held_lock+0x36/0x1c0 [ 530.933222] ? lock_downgrade+0x8f0/0x8f0 [ 530.937379] ? rcu_is_watching+0x8c/0x150 [ 530.941532] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 530.945972] ? __fget+0x414/0x670 [ 530.949442] ? match_held_lock+0x821/0x8d0 [ 530.953682] ? expand_files.part.8+0x9c0/0x9c0 [ 530.958266] ? kasan_check_write+0x14/0x20 [ 530.962503] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 530.967465] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 530.973178] do_vfs_ioctl+0x1de/0x1720 [ 530.977087] ? ioctl_preallocate+0x300/0x300 [ 530.981511] ? __fget_light+0x2f7/0x440 [ 530.985489] ? fget_raw+0x20/0x20 [ 530.988963] ? __sb_end_write+0xac/0xe0 [ 530.992950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 530.998494] ? fput+0x130/0x1a0 [ 531.001781] ? ksys_write+0x1ae/0x260 [ 531.005592] ? security_file_ioctl+0x94/0xc0 [ 531.010022] ksys_ioctl+0xa9/0xd0 [ 531.013486] __x64_sys_ioctl+0x73/0xb0 [ 531.017382] do_syscall_64+0x1b9/0x820 [ 531.021269] ? finish_task_switch+0x1d2/0x850 [ 531.025769] ? syscall_return_slowpath+0x5e0/0x5e0 [ 531.030703] ? syscall_return_slowpath+0x31d/0x5e0 [ 531.035647] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 531.041195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.046054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 531.051246] RIP: 0033:0x455b29 [ 531.054433] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.073951] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.081677] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 531.088952] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e16000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3fffffffffffd) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101240, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x401, 0x8) 13:26:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x3}}}}}, 0x0) [ 531.096220] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 531.103489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 531.110760] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000048 13:26:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="514e102665588f8ddb62a726895604d61859ef9fc7b9eff1ce0f26ef728249d9e75fc1fdcc7a162b53197a05be30ff34a65015483ac735c2e78397da46b8cb860f", 0x41) 13:26:51 executing program 4 (fault-call:7 fault-nth:73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:51 executing program 1: r0 = socket$inet6(0xa, 0x7fe, 0xf6c4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x10000316, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="a5eda25d99ad0d8b6afe2bb848bf64b54d9ebf46007641188ffa77861258a6b751292e0c839343f98a4d918f00ad0b00a6a5f958b5910e10371263dee7a8388c293712e6c4dae07f2caa4f96108de033c8e25f2c080aca595973219f5fa2f747ea48575af0ed0df112fb0ef20b4e3f398f3ac8b1c233bd28a3539076ed33a293203d4a7532d1944a512d5375d76378b6ab98b53d74fe7cc23fd815c28a166aab4a2ceddaaadec537da4e4c9711bec941f5354abe4a84a0cc563e496ce2cf060881bf92d6788125fbc0c4bde6aeec1a5f085844b7bb57e967797cef3b5b8281861cc491", 0xa7) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=ANY=[@ANYBLOB="10000002000000000000000093000000"], 0x10}}], 0x2, 0x8000) 13:26:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x6488}}}}}, 0x0) 13:26:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640), 0x0, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000003c0)=""/186, &(0x7f0000000480)=0xba) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10880, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x3}}, [0x81, 0xdece, 0x80, 0xfffffffffffffff8, 0x3, 0x10000, 0x5, 0x3, 0x4, 0x800, 0x0, 0x3b1c, 0x22, 0x9, 0x10001]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x97, "74d98bff822f9b9d7282e1039fca6c624d4d0714cd47827a8a6987f4c3e1f0804646df29a25fbf02b43c8849db73e48bee3d21ae31da5c7f558081a252a77abd73550b58bcaf619eaa1c25e2ea5d867376c698e0c2d30bd9f047db7340d6a6eac56ebefa264e0574b72edbf3752b4b0927f2294751bf4b50ba5a840dc692737e8c926b4675c3d29d6a9dba3dce709f4b5e134a2da823f2"}, &(0x7f0000000240)=0x9f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, 0x0, 0x3f, 0x0, "2dbeafb806cd9f67b7c5abf955577177bdea2d3dfbf2885b8d96f1a3d97d021a11345b70c3327c78d6b10d023f7f8e7c177417b5e3e798a731b7c3e6aa36e167435e093acf5380f48e5ecd92c2fc0806"}, 0xd8) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) [ 531.426537] binder: BINDER_SET_CONTEXT_MGR already set [ 531.434635] FAULT_INJECTION: forcing a failure. [ 531.434635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.434934] binder: 2729:2786 ioctl 40046207 0 returned -16 [ 531.446725] CPU: 0 PID: 2774 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 531.446738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.446749] Call Trace: [ 531.471560] dump_stack+0x1c9/0x2b4 [ 531.475197] ? dump_stack_print_info.cold.2+0x52/0x52 [ 531.480406] ? zap_class+0x740/0x740 [ 531.484140] should_fail.cold.4+0xa/0x1a [ 531.488211] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 531.493327] ? graph_lock+0x170/0x170 [ 531.497135] ? is_bpf_text_address+0xd7/0x170 [ 531.501995] ? find_held_lock+0x36/0x1c0 [ 531.506066] ? __lock_is_held+0xb5/0x140 [ 531.510148] ? check_same_owner+0x340/0x340 [ 531.514481] ? rcu_note_context_switch+0x730/0x730 [ 531.515529] binder: 2729:2734 ERROR: BC_REGISTER_LOOPER called without request [ 531.519464] __alloc_pages_nodemask+0x36e/0xdb0 [ 531.519486] ? lock_downgrade+0x8f0/0x8f0 [ 531.519507] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 531.519521] ? graph_lock+0x170/0x170 [ 531.519539] ? __lock_is_held+0xb5/0x140 [ 531.548545] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 531.553007] ? __lock_is_held+0xb5/0x140 [ 531.557098] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 531.562659] alloc_pages_current+0x10c/0x210 [ 531.567080] __get_free_pages+0xf/0x40 [ 531.570975] mmu_topup_memory_caches+0x1f8/0x3a0 [ 531.575395] binder: undelivered TRANSACTION_COMPLETE [ 531.575751] ? kvm_apic_has_interrupt+0xe9/0x230 [ 531.585596] kvm_mmu_load+0x21/0x10e0 [ 531.589425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.594951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.600478] vcpu_enter_guest+0x3aa6/0x6090 [ 531.604788] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 531.609033] ? kvm_set_msr_common+0x26a0/0x26a0 [ 531.613694] ? zap_class+0x740/0x740 [ 531.617418] ? perf_trace_lock+0x920/0x920 [ 531.621654] ? __lock_acquire+0x7fc/0x5020 [ 531.625878] ? vmx_vcpu_reset+0x1040/0x1040 [ 531.630184] ? graph_lock+0x170/0x170 [ 531.633982] ? __lock_is_held+0xb5/0x140 [ 531.638034] ? xfs_rmap_unmap+0x7f0/0x3260 [ 531.642358] ? lock_acquire+0x1e4/0x540 [ 531.646327] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 531.651337] ? lock_release+0xa30/0xa30 [ 531.655335] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 531.660601] ? kvm_arch_dev_ioctl+0x610/0x610 [ 531.665083] ? preempt_notifier_dec+0x20/0x20 [ 531.669574] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 531.674413] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 531.679432] kvm_vcpu_ioctl+0x7b8/0x1300 [ 531.683483] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 531.689188] ? find_held_lock+0x36/0x1c0 [ 531.693246] ? lock_downgrade+0x8f0/0x8f0 [ 531.697386] ? rcu_is_watching+0x8c/0x150 [ 531.701523] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 531.705929] ? __fget+0x414/0x670 [ 531.709378] ? match_held_lock+0x821/0x8d0 [ 531.713615] ? expand_files.part.8+0x9c0/0x9c0 [ 531.718196] ? kasan_check_write+0x14/0x20 [ 531.722434] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 531.727359] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 531.733058] do_vfs_ioctl+0x1de/0x1720 [ 531.736936] ? ioctl_preallocate+0x300/0x300 [ 531.741332] ? __fget_light+0x2f7/0x440 [ 531.745316] ? fget_raw+0x20/0x20 [ 531.748765] ? __sb_end_write+0xac/0xe0 [ 531.752729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 531.758256] ? fput+0x130/0x1a0 [ 531.761522] ? ksys_write+0x1ae/0x260 [ 531.765423] ? security_file_ioctl+0x94/0xc0 [ 531.769833] ksys_ioctl+0xa9/0xd0 [ 531.773293] __x64_sys_ioctl+0x73/0xb0 [ 531.777173] do_syscall_64+0x1b9/0x820 [ 531.781054] ? finish_task_switch+0x1d2/0x850 [ 531.785538] ? syscall_return_slowpath+0x5e0/0x5e0 [ 531.790454] ? syscall_return_slowpath+0x31d/0x5e0 [ 531.795386] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 531.800757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.805592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 531.810772] RIP: 0033:0x455b29 13:26:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x4, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f20d86635080000000f22d866b9120400000f320f01dfbaf80c66b8b0f20d8166efbafc0c66b80400000066ef0f20d86635200000000f22d86600ef66b8810000000f23c00f21f8663500000f000f23f8b82d010f00d0f08246f4000f07", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40202) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140)=0x6, 0x4) [ 531.813945] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.833345] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.841041] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 531.848313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 531.855575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 531.862831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 531.870087] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000049 [ 531.919993] binder: 2795:2797 ERROR: BC_REGISTER_LOOPER called without request 13:26:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0xffffa888}}}}}, 0x0) [ 531.971514] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:26:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2f4, 0x501400) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xa8, 0x10001, "ce9cff9a743afca3d23764f586392aba3f192be31382de11a9dd1343dab29b54366aa8421535555a13834645313f1a13af7383b05140efbda4cc92d600fd72e0ce36a8ff48caf85860d5acbfb1cff5863eb3034cd4171fc67e68490d939f3c214ef6fe0ae8e6dfbfb48d6e6aff228ae53fa25dc3462c55bd97950bcb67d2f563fc61cd470782290bcafa939992cf35f3c085a3c744aec7af309e8c24eca3701e"}, &(0x7f00000001c0), 0x400) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x1b}) 13:26:52 executing program 4 (fault-call:7 fault-nth:74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.162415] FAULT_INJECTION: forcing a failure. [ 532.162415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.174549] CPU: 0 PID: 2815 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 532.181483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.190841] Call Trace: [ 532.193445] dump_stack+0x1c9/0x2b4 [ 532.197084] ? dump_stack_print_info.cold.2+0x52/0x52 [ 532.202288] ? zap_class+0x740/0x740 [ 532.206030] should_fail.cold.4+0xa/0x1a [ 532.210102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 532.215214] ? graph_lock+0x170/0x170 [ 532.219027] ? is_bpf_text_address+0xd7/0x170 [ 532.223541] ? find_held_lock+0x36/0x1c0 [ 532.227611] ? __lock_is_held+0xb5/0x140 [ 532.231693] ? check_same_owner+0x340/0x340 [ 532.236023] ? rcu_note_context_switch+0x730/0x730 [ 532.240976] __alloc_pages_nodemask+0x36e/0xdb0 [ 532.245655] ? lock_downgrade+0x8f0/0x8f0 [ 532.249833] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 532.254863] ? graph_lock+0x170/0x170 [ 532.258671] ? __lock_is_held+0xb5/0x140 [ 532.262734] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 532.267178] ? __lock_is_held+0xb5/0x140 [ 532.271260] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 532.276808] alloc_pages_current+0x10c/0x210 [ 532.281230] __get_free_pages+0xf/0x40 [ 532.285120] mmu_topup_memory_caches+0x1f8/0x3a0 [ 532.289883] ? kvm_apic_has_interrupt+0xe9/0x230 [ 532.294651] kvm_mmu_load+0x21/0x10e0 [ 532.298458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.304031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.309593] vcpu_enter_guest+0x3aa6/0x6090 [ 532.313919] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 532.318174] ? kvm_set_msr_common+0x26a0/0x26a0 [ 532.322856] ? zap_class+0x740/0x740 [ 532.326574] ? perf_trace_lock+0x920/0x920 [ 532.330843] ? __lock_acquire+0x7fc/0x5020 [ 532.335082] ? vmx_vcpu_reset+0x1040/0x1040 [ 532.339449] ? graph_lock+0x170/0x170 [ 532.343270] ? __lock_is_held+0xb5/0x140 [ 532.347348] ? lock_acquire+0x1e4/0x540 [ 532.351372] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 532.356427] ? lock_release+0xa30/0xa30 [ 532.360439] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 532.365730] ? kvm_arch_dev_ioctl+0x610/0x610 [ 532.370229] ? preempt_notifier_dec+0x20/0x20 [ 532.374754] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 532.379628] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 532.384668] kvm_vcpu_ioctl+0x7b8/0x1300 [ 532.388740] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 532.394467] ? find_held_lock+0x36/0x1c0 [ 532.398555] ? lock_downgrade+0x8f0/0x8f0 [ 532.402727] ? rcu_is_watching+0x8c/0x150 [ 532.406898] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 532.411323] ? __fget+0x414/0x670 [ 532.414789] ? match_held_lock+0x821/0x8d0 [ 532.419026] ? expand_files.part.8+0x9c0/0x9c0 [ 532.423611] ? kasan_check_write+0x14/0x20 [ 532.427847] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 532.432810] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 532.438542] do_vfs_ioctl+0x1de/0x1720 [ 532.442453] ? ioctl_preallocate+0x300/0x300 [ 532.446881] ? __fget_light+0x2f7/0x440 [ 532.451041] ? fget_raw+0x20/0x20 [ 532.454528] ? __sb_end_write+0xac/0xe0 [ 532.458515] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.464148] ? fput+0x130/0x1a0 [ 532.467439] ? ksys_write+0x1ae/0x260 [ 532.471257] ? security_file_ioctl+0x94/0xc0 [ 532.475711] ksys_ioctl+0xa9/0xd0 [ 532.479173] __x64_sys_ioctl+0x73/0xb0 [ 532.483078] do_syscall_64+0x1b9/0x820 [ 532.486976] ? finish_task_switch+0x1d2/0x850 [ 532.491465] ? syscall_return_slowpath+0x5e0/0x5e0 [ 532.496472] ? syscall_return_slowpath+0x31d/0x5e0 [ 532.501404] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 532.506760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.511606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.516781] RIP: 0033:0x455b29 [ 532.519975] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.539277] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.546984] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 532.554243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x900, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:52 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}}, &(0x7f0000000100)=0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x2000032, r0, 0x0) close(r0) [ 532.561501] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 532.568757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 532.576016] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004a 13:26:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2800002}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x33, 0x600, 0x70bd2d, 0x25dfdbfd, {0x19}, [@typed={0x8, 0x30, @uid=r1}, @generic="5a65615fd360f30f03ef9e331ae7604f8864b1520c0f3ed79e9a862068784469c26980345d0d97c1d230dd6f6cb574e0290bf0411c33c53d6465cc3657da2e11022e765e727d794a35ff530ac0ae417edb506aa67672868b89cca8369bc1314433f9d9bd264aa5e1a2358dfaa48e20d2b11d689a9e15031171879a5b89ac42641afa15a1f2d3509458b8bfe971c7b613af411f164c285339320efdd7ca661414f68818b9ea29f607aa25b39c5aaf77434a8b9ad263452279a64a24be51d396b83fdda9b3e9d4290668839f97b1af594974c100872057a627807bba8f11dc60b1d66689"]}, 0x100}, 0x1}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$getown(r2, 0x9) ptrace$setregs(0xf, r3, 0x1ff, &(0x7f0000000080)="7fe17448a049cf4d0759effe286620c6e12e514889c6dcecb5") sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002d0019010800000000000000030000000c000a00080001000000000076645e34a8f8cb88a7da9361fd60a0ab0ca6e50a9c836c094fcf64b8a9ba54be12db82024ab7fcafd0c0338dc9545cb46b234752f992e085d98e741b90a649463817024d82f7438c8860ef1424c6b28a5ac5efe41d14000000"], 0x20}, 0x1}, 0x0) 13:26:52 executing program 6: r0 = socket(0x14, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="1e", 0x1}], 0x1, &(0x7f00000005c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}], 0x18, 0x80}, 0x40000) 13:26:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0xffffdd86}}}}}, 0x0) 13:26:52 executing program 4 (fault-call:7 fault-nth:75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:52 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) r1 = gettid() ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000140)="6066ade82f7943b4d820769fbe528f6ed5e4fa980de35fe7c02457dd04b3bc015f17e8f300ffe5bd416e96e5050332ba8be0c80ce2263e05630604516e8833604f27b671164373e33701fbd113595d9991c29e4ed9f1d4d7b9c2c1d38da9d0dde7c9f736f00fedae97fe88aaac0335d76c5157e858ca3b36b2a2712f3e72ecaf3b6ae698e8aea7453d0309ab31fb7c1cb5267f95b82a31b2556264", 0x9b}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000a200a0009000100040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 532.714081] binder: BINDER_SET_CONTEXT_MGR already set [ 532.720821] binder: 2795:2797 ioctl 40046207 0 returned -16 [ 532.749446] binder: 2795:2797 ERROR: BC_REGISTER_LOOPER called without request [ 532.858217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 532.874629] FAULT_INJECTION: forcing a failure. [ 532.874629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.886643] CPU: 0 PID: 2843 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 532.893584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.902953] Call Trace: [ 532.905544] dump_stack+0x1c9/0x2b4 [ 532.909177] ? dump_stack_print_info.cold.2+0x52/0x52 [ 532.914378] ? zap_class+0x740/0x740 [ 532.918098] should_fail.cold.4+0xa/0x1a [ 532.922154] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 532.927255] ? graph_lock+0x170/0x170 [ 532.931050] ? is_bpf_text_address+0xd7/0x170 [ 532.935556] ? find_held_lock+0x36/0x1c0 [ 532.939614] ? __lock_is_held+0xb5/0x140 [ 532.943677] ? check_same_owner+0x340/0x340 [ 532.947991] ? rcu_note_context_switch+0x730/0x730 [ 532.952926] __alloc_pages_nodemask+0x36e/0xdb0 [ 532.957694] ? lock_downgrade+0x8f0/0x8f0 [ 532.961840] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 532.966850] ? graph_lock+0x170/0x170 [ 532.970643] ? __lock_is_held+0xb5/0x140 [ 532.974709] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 532.979126] ? __lock_is_held+0xb5/0x140 [ 532.983196] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 532.988854] alloc_pages_current+0x10c/0x210 [ 532.993270] __get_free_pages+0xf/0x40 [ 532.997162] mmu_topup_memory_caches+0x1f8/0x3a0 [ 533.001917] ? kvm_apic_has_interrupt+0xe9/0x230 [ 533.007717] kvm_mmu_load+0x21/0x10e0 [ 533.011521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.017051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.022581] vcpu_enter_guest+0x3aa6/0x6090 [ 533.026893] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 533.031124] ? kvm_set_msr_common+0x26a0/0x26a0 [ 533.035796] ? zap_class+0x740/0x740 [ 533.039507] ? perf_trace_lock+0x920/0x920 [ 533.043824] ? __lock_acquire+0x7fc/0x5020 [ 533.048052] ? vmx_vcpu_reset+0x1040/0x1040 [ 533.052370] ? graph_lock+0x170/0x170 [ 533.056180] ? __lock_is_held+0xb5/0x140 [ 533.060237] ? lock_acquire+0x1e4/0x540 [ 533.064201] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 533.069214] ? lock_release+0xa30/0xa30 [ 533.073180] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 533.078467] ? kvm_arch_dev_ioctl+0x610/0x610 [ 533.082970] ? preempt_notifier_dec+0x20/0x20 [ 533.087474] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 533.092308] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 533.097339] kvm_vcpu_ioctl+0x7b8/0x1300 [ 533.101401] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 533.107113] ? find_held_lock+0x36/0x1c0 [ 533.111179] ? lock_downgrade+0x8f0/0x8f0 [ 533.115334] ? rcu_is_watching+0x8c/0x150 [ 533.119472] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 533.123888] ? __fget+0x414/0x670 [ 533.127339] ? match_held_lock+0x821/0x8d0 [ 533.131577] ? expand_files.part.8+0x9c0/0x9c0 [ 533.136162] ? kasan_check_write+0x14/0x20 [ 533.140389] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 533.145326] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 533.151289] do_vfs_ioctl+0x1de/0x1720 [ 533.155172] ? ioctl_preallocate+0x300/0x300 [ 533.159574] ? __fget_light+0x2f7/0x440 [ 533.163549] ? fget_raw+0x20/0x20 [ 533.166995] ? __sb_end_write+0xac/0xe0 [ 533.171069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.176596] ? fput+0x130/0x1a0 [ 533.179872] ? ksys_write+0x1ae/0x260 [ 533.183681] ? security_file_ioctl+0x94/0xc0 [ 533.188086] ksys_ioctl+0xa9/0xd0 [ 533.191537] __x64_sys_ioctl+0x73/0xb0 [ 533.195422] do_syscall_64+0x1b9/0x820 [ 533.199300] ? finish_task_switch+0x1d2/0x850 [ 533.203798] ? syscall_return_slowpath+0x5e0/0x5e0 [ 533.208720] ? syscall_return_slowpath+0x31d/0x5e0 [ 533.213648] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 533.219009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 533.223856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 533.229037] RIP: 0033:0x455b29 [ 533.232211] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 533.252316] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:26:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001200)={r1, @in6={{0xa, 0x4e23, 0xc8b1, @local={0xfe, 0x80, [], 0xaa}, 0x5}}, 0x4, 0x5}, &(0x7f00000012c0)=0x90) ioctl(r0, 0x4000004000008912, &(0x7f0000001300)="295ee1311f16f477671070") ioctl(r0, 0x7fff, &(0x7f0000000040)="9a5ad1d2ef0d1bd00a13b7b810ef12b8050cc02d7b7141e6085a64630d1110cf5b8eb82e0a119d5a7ca3692fd8031fc3bc6dc06a73bdd2adf6c143f249ae98fb0edc04271fefadf1b952dede8ccdfc38f23822a599fadbef7eabca303eba5c96a72616ac589e9e5ccdd94d6a7b185280906df54c88608a6f3e1b5af39ead2bdc678e058c81735c290e7fa8b1867d7bd769bf4155fcb9d90df023f51e08910788801dfe") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x401) r3 = socket(0xa, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000004f40), &(0x7f0000000000)=0x4) [ 533.260036] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 533.267296] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 533.274551] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 533.281807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 533.289069] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004b 13:26:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0xffffff7f, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640), 0x0, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 533.305932] binder: undelivered TRANSACTION_COMPLETE 13:26:53 executing program 1: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYPTR], 0x321) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x4) linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./bus\x00', 0x1000) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) lseek(r0, 0x0, 0x4) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="180129bd7000fedbdf250e00000008000600090000000800040012b8a1000c0003000800010001000000080004000100000020000300140002007369743000000000000000000000000008000100030000004c000200080003000fa900000800050006000000080002004e24000008000500ff7f000008000b00000000000800040005000000080004000500000008000600000000000800070041a100001c0001000800020085000000080005000100000008000100020000000c00030008000400ff010000"], 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) 13:26:53 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000380)=0x8000000a, 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 13:26:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x689}}}}}, 0x0) [ 533.358566] binder: 2861:2862 ERROR: BC_REGISTER_LOOPER called without request 13:26:53 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000292ff8)={0x10000000000002}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="01009aa1550ed2abdb11f54a29bb0814000000000000"], 0x8, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x40040) getpeername$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14) msgrcv(r0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x1, 0xa4a3ad41a879dde0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/251}, 0x103, 0x0, 0x1000) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000000c0)="66b9b30300000f3264660f3a40240e0f009e0400b800008ee00f01c966b8aa0000000f23d00f21f866351000000c0f23f8f20f1ac0260fe76f00660f01dfba4300ec", 0x42}], 0x1, 0x14, &(0x7f00000003c0)=[@flags={0x3, 0x2}, @cstype3={0x5, 0x6}], 0x1) 13:26:53 executing program 4 (fault-call:7 fault-nth:76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:53 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) restart_syscall() mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) umount2(&(0x7f00000000c0)='.', 0x3) syz_fuseblk_mount(&(0x7f0000001400)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c48) 13:26:53 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003df000/0x1000)=nil, 0x7fffdfc20000, 0x0, 0x0, 0x0) clock_getres(0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0xffff, 0xfff}, {0x80000000, 0x8}, 0x800, 0x3, 0x7f}) [ 533.610575] FAULT_INJECTION: forcing a failure. [ 533.610575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.622618] CPU: 0 PID: 2883 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 533.629573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.638933] Call Trace: [ 533.641532] dump_stack+0x1c9/0x2b4 [ 533.645168] ? dump_stack_print_info.cold.2+0x52/0x52 [ 533.650366] ? preempt_notifier_register+0x200/0x200 [ 533.655481] should_fail.cold.4+0xa/0x1a [ 533.659548] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 533.664655] ? __schedule+0x854/0x1ea0 [ 533.668544] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 533.673307] ? __sched_text_start+0x8/0x8 [ 533.677462] ? retint_kernel+0x10/0x10 [ 533.681378] ? __lock_is_held+0xb5/0x140 [ 533.685454] ? check_same_owner+0x340/0x340 [ 533.689781] ? __lock_is_held+0xb5/0x140 [ 533.693861] __alloc_pages_nodemask+0x36e/0xdb0 [ 533.698536] ? lock_downgrade+0x8f0/0x8f0 [ 533.702694] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 533.707720] ? graph_lock+0x170/0x170 [ 533.711518] ? __lock_is_held+0xb5/0x140 [ 533.715575] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 533.720001] ? __lock_is_held+0xb5/0x140 [ 533.724079] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 533.729626] alloc_pages_current+0x10c/0x210 [ 533.734048] __get_free_pages+0xf/0x40 [ 533.737937] mmu_topup_memory_caches+0x1f8/0x3a0 [ 533.742706] ? kvm_apic_has_interrupt+0xe9/0x230 [ 533.747475] kvm_mmu_load+0x21/0x10e0 [ 533.751277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.756831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.762381] vcpu_enter_guest+0x3aa6/0x6090 [ 533.766716] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 533.770965] ? kvm_set_msr_common+0x26a0/0x26a0 [ 533.775645] ? vmx_vcpu_load+0xadf/0xff0 [ 533.779713] ? __lock_acquire+0x7fc/0x5020 [ 533.783962] ? vmx_vcpu_reset+0x1040/0x1040 [ 533.788285] ? graph_lock+0x170/0x170 [ 533.792087] ? __lock_acquire+0x7fc/0x5020 [ 533.796341] ? __lock_is_held+0xb5/0x140 [ 533.800412] ? lock_acquire+0x1e4/0x540 [ 533.804384] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 533.809413] ? lock_release+0xa30/0xa30 [ 533.813383] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 533.818662] ? kvm_arch_dev_ioctl+0x610/0x610 [ 533.823158] ? preempt_notifier_dec+0x20/0x20 [ 533.827677] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 533.832518] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 533.837550] kvm_vcpu_ioctl+0x7b8/0x1300 [ 533.841619] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 533.847350] ? find_held_lock+0x36/0x1c0 [ 533.851422] ? find_held_lock+0x36/0x1c0 [ 533.855497] ? lock_downgrade+0x8f0/0x8f0 [ 533.859655] ? kasan_check_read+0x11/0x20 [ 533.863800] ? rcu_is_watching+0x8c/0x150 [ 533.867960] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 533.872467] ? __fget+0x414/0x670 [ 533.875923] ? match_held_lock+0x821/0x8d0 [ 533.880164] ? expand_files.part.8+0x9c0/0x9c0 [ 533.884748] ? kasan_check_write+0x14/0x20 [ 533.888982] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 533.893921] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 533.899638] do_vfs_ioctl+0x1de/0x1720 [ 533.903542] ? __lock_is_held+0xb5/0x140 [ 533.907611] ? ioctl_preallocate+0x300/0x300 [ 533.912024] ? __fget_light+0x2f7/0x440 [ 533.916002] ? fget_raw+0x20/0x20 [ 533.919460] ? __sb_end_write+0xac/0xe0 [ 533.923441] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.928978] ? fput+0x130/0x1a0 [ 533.932265] ? ksys_write+0x1ae/0x260 [ 533.936072] ? security_file_ioctl+0x94/0xc0 [ 533.940481] ksys_ioctl+0xa9/0xd0 [ 533.943935] __x64_sys_ioctl+0x73/0xb0 [ 533.947830] do_syscall_64+0x1b9/0x820 [ 533.951716] ? finish_task_switch+0x1d2/0x850 [ 533.956218] ? syscall_return_slowpath+0x5e0/0x5e0 [ 533.961150] ? syscall_return_slowpath+0x31d/0x5e0 [ 533.966083] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 533.971450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 533.976314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 533.981506] RIP: 0033:0x455b29 [ 533.984687] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.004162] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.011880] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 534.019161] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 534.026427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 534.033693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 534.040962] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004c 13:26:54 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r1, r0, 0x400) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000001980)=""/4096) r3 = accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000640), 0x800) fcntl$setpipe(r3, 0x407, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8b93, &(0x7f0000000080)={'tunl0\x00', @ifru_data=&(0x7f0000000040)="615b5d78f7764d4c09fedf2a53ac6312f89297c92dc0fd0ec831b10532efde46"}) r6 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) setresgid(r0, r0, r0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCGLCKTRMIOS(r8, 0x5412, &(0x7f0000000000)={0x3}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f00000002c0)=0x18) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x101880, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r9, 0x1000}, 0x5) io_setup(0x8, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000680)="2a0bcdd9a665ae764189e4323f380abb1064f091ae4d23990fe3e2dcbe205514d5afd21aeaca0f7c98d6c843fe87d216d91d29c7682620778f36a705fd28eb39736a0815b7fa551f10586a2da2e5ffdfaa0a6604df065c68c53d3e9bb5db32d8bdcd63b4f3d137b8eaba4b2ecc88e158585b20a4bdbe7980432d88beb0f9c5614677d73e493abd90ce95d9f66016b752a0d318fb88555da3da44fa4067a38dc2e212b6b4fbb6ca03a165793553f48b7648e6a6088d924aae48aef9d9fd40a6c214ed3fed4a55ce45fb2b56f759c7cc3aa2c7e954051bc3f0a981f4a97d31d28aa0bd52c7cb4237d732baccc26cac00e43c00911ef5230a962d4eb0a746ff8f", &(0x7f0000000780)="18d95557a36ef4c2f3e35008192e003a57b10595f8034fd82dc768e9562b108ac03118f99cbfc6b37a9e08943f5c08b18ea3c968a0335fd4154510b15e7501346db48e8c2f61a0f67abcf4f002d57fd6190d77f9fbddbf12bf566846251847f5a5a0a68134b5f19406ea83ec6617657b3e4cd29ff3053403790ec5bf120c382c47edc0c83cac0a44142c80a7e4c64f93b5a0d6997842d1a60b85db25a9a88231a9d42de5416988cd96f3b98274357c2d148214dfee7e50b93a924083e1adbd69ed76f63fe0ad", 0x1}, 0x20) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x10002, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f0000000440)=0x7, 0x4) r12 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x32, 0x880) dup3(r4, r4, 0x0) eventfd(0x8) 13:26:54 executing program 4 (fault-call:7 fault-nth:77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 534.158760] binder: undelivered transaction 423, put_user failed [ 534.170367] binder: 2861:2862 ioctl c0306201 200000c0 returned -14 [ 534.231958] binder: BINDER_SET_CONTEXT_MGR already set [ 534.232005] FAULT_INJECTION: forcing a failure. [ 534.232005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.237665] binder: 2861:2862 ioctl 40046207 0 returned -16 [ 534.249270] CPU: 1 PID: 2906 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 534.249281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.249287] Call Trace: [ 534.249314] dump_stack+0x1c9/0x2b4 [ 534.249334] ? dump_stack_print_info.cold.2+0x52/0x52 [ 534.249352] ? lock_downgrade+0x8f0/0x8f0 [ 534.249376] should_fail.cold.4+0xa/0x1a [ 534.249392] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 534.249407] ? graph_lock+0x170/0x170 [ 534.249424] ? is_bpf_text_address+0xd7/0x170 [ 534.249443] ? find_held_lock+0x36/0x1c0 [ 534.249461] ? __lock_is_held+0xb5/0x140 [ 534.257193] binder: 2861:2862 ERROR: BC_REGISTER_LOOPER called without request [ 534.262124] ? check_same_owner+0x340/0x340 [ 534.262145] ? rcu_note_context_switch+0x730/0x730 [ 534.262173] __alloc_pages_nodemask+0x36e/0xdb0 [ 534.262190] ? lock_downgrade+0x8f0/0x8f0 [ 534.262210] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 534.262225] ? graph_lock+0x170/0x170 [ 534.262239] ? __lock_is_held+0xb5/0x140 [ 534.262251] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 534.262277] ? __lock_is_held+0xb5/0x140 [ 534.293826] binder: undelivered TRANSACTION_COMPLETE [ 534.296310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 534.296333] alloc_pages_current+0x10c/0x210 [ 534.296352] __get_free_pages+0xf/0x40 [ 534.296370] mmu_topup_memory_caches+0x1f8/0x3a0 [ 534.296388] ? kvm_apic_has_interrupt+0xe9/0x230 [ 534.296408] kvm_mmu_load+0x21/0x10e0 [ 534.296423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.296440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.402565] vcpu_enter_guest+0x3aa6/0x6090 [ 534.406877] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 534.411110] ? kvm_set_msr_common+0x26a0/0x26a0 [ 534.415781] ? perf_trace_lock+0x920/0x920 [ 534.420007] ? __lock_acquire+0x7fc/0x5020 [ 534.424234] ? vmx_vcpu_reset+0x1040/0x1040 [ 534.428554] ? graph_lock+0x170/0x170 [ 534.432348] ? __lock_acquire+0x7fc/0x5020 [ 534.436588] ? __lock_is_held+0xb5/0x140 [ 534.440735] ? lock_acquire+0x1e4/0x540 [ 534.444695] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 534.449700] ? lock_release+0xa30/0xa30 [ 534.453667] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 534.458934] ? kvm_arch_dev_ioctl+0x610/0x610 [ 534.463416] ? preempt_notifier_dec+0x20/0x20 [ 534.467908] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 534.472736] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 534.477746] kvm_vcpu_ioctl+0x7b8/0x1300 [ 534.481800] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 534.487503] ? find_held_lock+0x36/0x1c0 [ 534.491556] ? find_held_lock+0x36/0x1c0 [ 534.495613] ? lock_downgrade+0x8f0/0x8f0 [ 534.499753] ? kasan_check_read+0x11/0x20 [ 534.503889] ? rcu_is_watching+0x8c/0x150 [ 534.508034] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 534.512698] ? __fget+0x414/0x670 [ 534.516402] ? match_held_lock+0x821/0x8d0 [ 534.520645] ? expand_files.part.8+0x9c0/0x9c0 [ 534.525227] ? kasan_check_write+0x14/0x20 [ 534.529453] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 534.534376] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 534.540079] do_vfs_ioctl+0x1de/0x1720 [ 534.543966] ? __lock_is_held+0xb5/0x140 [ 534.548026] ? ioctl_preallocate+0x300/0x300 [ 534.552513] ? __fget_light+0x2f7/0x440 [ 534.556496] ? fget_raw+0x20/0x20 [ 534.559940] ? __sb_end_write+0xac/0xe0 [ 534.563922] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 534.569455] ? fput+0x130/0x1a0 [ 534.572735] ? ksys_write+0x1ae/0x260 [ 534.576537] ? security_file_ioctl+0x94/0xc0 [ 534.580946] ksys_ioctl+0xa9/0xd0 [ 534.584389] __x64_sys_ioctl+0x73/0xb0 [ 534.588274] do_syscall_64+0x1b9/0x820 [ 534.592158] ? syscall_slow_exit_work+0x500/0x500 [ 534.597078] ? syscall_return_slowpath+0x5e0/0x5e0 [ 534.602176] ? syscall_return_slowpath+0x31d/0x5e0 [ 534.607106] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 534.612463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.617299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.622481] RIP: 0033:0x455b29 [ 534.625654] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.644938] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.652640] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 534.659898] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 534.667152] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 534.674406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 13:26:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0xfdfdffff, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x3580}}}}}, 0x0) [ 534.681662] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004d 13:26:54 executing program 4 (fault-call:7 fault-nth:78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000f80)=@resolve_addr={0x15, 0x110, 0xfa00, {0xffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"d88f8e6c3535c67fc27a0f66721e0155"}}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x118) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x200080) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) 13:26:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x54, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000440), 0x2}, 0x20) [ 534.739843] binder: 2917:2919 ERROR: BC_REGISTER_LOOPER called without request 13:26:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640), 0x0, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:26:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) 13:26:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x2}}}}}, 0x0) 13:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) io_setup(0x1c32, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x10001, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={0x1}, 0x8}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) shutdown(r3, 0x1) close(r1) 13:26:55 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000001, 0x103001) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r2, &(0x7f0000f65000)=[{&(0x7f0000000180)="80fd02a8e08c", 0x6}], 0x1, 0x0) [ 535.131007] FAULT_INJECTION: forcing a failure. [ 535.131007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.143177] CPU: 0 PID: 2937 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 535.150126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.159496] Call Trace: [ 535.162111] dump_stack+0x1c9/0x2b4 [ 535.165848] ? dump_stack_print_info.cold.2+0x52/0x52 [ 535.171048] ? zap_class+0x740/0x740 [ 535.174885] should_fail.cold.4+0xa/0x1a [ 535.178981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 535.184117] ? graph_lock+0x170/0x170 [ 535.187940] ? is_bpf_text_address+0xd7/0x170 [ 535.192451] ? find_held_lock+0x36/0x1c0 [ 535.196522] ? __lock_is_held+0xb5/0x140 [ 535.200633] ? check_same_owner+0x340/0x340 [ 535.204983] ? rcu_note_context_switch+0x730/0x730 [ 535.209946] __alloc_pages_nodemask+0x36e/0xdb0 [ 535.214629] ? lock_downgrade+0x8f0/0x8f0 [ 535.218799] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 535.223836] ? graph_lock+0x170/0x170 [ 535.227644] ? __lock_is_held+0xb5/0x140 [ 535.231709] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 535.236139] ? __lock_is_held+0xb5/0x140 [ 535.240225] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 535.246410] alloc_pages_current+0x10c/0x210 [ 535.250841] __get_free_pages+0xf/0x40 [ 535.254737] mmu_topup_memory_caches+0x1f8/0x3a0 [ 535.259499] ? kvm_apic_has_interrupt+0xe9/0x230 [ 535.264274] kvm_mmu_load+0x21/0x10e0 [ 535.268083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.273627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.279177] vcpu_enter_guest+0x3aa6/0x6090 [ 535.283510] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 535.287761] ? kvm_set_msr_common+0x26a0/0x26a0 [ 535.292447] ? zap_class+0x740/0x740 [ 535.296178] ? perf_trace_lock+0x920/0x920 [ 535.300419] ? __lock_acquire+0x7fc/0x5020 [ 535.304675] ? vmx_vcpu_reset+0x1040/0x1040 [ 535.309002] ? graph_lock+0x170/0x170 [ 535.312825] ? __lock_is_held+0xb5/0x140 [ 535.316909] ? lock_acquire+0x1e4/0x540 [ 535.320889] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 535.325913] ? lock_release+0xa30/0xa30 [ 535.329886] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 535.335170] ? kvm_arch_dev_ioctl+0x610/0x610 [ 535.339669] ? preempt_notifier_dec+0x20/0x20 [ 535.344182] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 535.349034] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 535.354221] kvm_vcpu_ioctl+0x7b8/0x1300 [ 535.358294] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 535.364243] ? find_held_lock+0x36/0x1c0 [ 535.368342] ? lock_downgrade+0x8f0/0x8f0 [ 535.372515] ? rcu_is_watching+0x8c/0x150 [ 535.376666] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 535.381306] ? __fget+0x414/0x670 [ 535.384770] ? match_held_lock+0x821/0x8d0 [ 535.389023] ? expand_files.part.8+0x9c0/0x9c0 [ 535.393633] ? kasan_check_write+0x14/0x20 [ 535.397875] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 535.402825] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 535.408543] do_vfs_ioctl+0x1de/0x1720 [ 535.412440] ? ioctl_preallocate+0x300/0x300 [ 535.416849] ? __fget_light+0x2f7/0x440 [ 535.420846] ? fget_raw+0x20/0x20 [ 535.424305] ? __sb_end_write+0xac/0xe0 [ 535.428290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 535.433830] ? fput+0x130/0x1a0 [ 535.437109] ? ksys_write+0x1ae/0x260 [ 535.440926] ? security_file_ioctl+0x94/0xc0 [ 535.445340] ksys_ioctl+0xa9/0xd0 [ 535.448815] __x64_sys_ioctl+0x73/0xb0 [ 535.452741] do_syscall_64+0x1b9/0x820 [ 535.456629] ? finish_task_switch+0x1d2/0x850 [ 535.461131] ? syscall_return_slowpath+0x5e0/0x5e0 [ 535.466064] ? syscall_return_slowpath+0x31d/0x5e0 [ 535.471005] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 535.476379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.481238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 535.486428] RIP: 0033:0x455b29 [ 535.489612] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 535.509135] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.516861] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 535.524127] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 13:26:55 executing program 3: r0 = gettid() r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r3 = dup2(r2, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x2, 0x10000, 0x1000, &(0x7f0000140000/0x1000)=nil}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 13:26:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x200000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 535.531398] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 535.538668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 535.545940] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004e [ 535.563219] binder: undelivered transaction 425, put_user failed [ 535.574527] binder: 2917:2919 ioctl c0306201 200000c0 returned -14 13:26:55 executing program 6: r0 = socket$inet(0x2, 0x4, 0x40003) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x1, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x3, 'dh\x00', 0x24, 0x100000001, 0x5b}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x3, 0x7, 0x5, 0x8}}, 0x44) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x2b4) 13:26:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x4888}}}}}, 0x0) 13:26:55 executing program 4 (fault-call:7 fault-nth:79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:55 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0xa, [0x9, 0x9, 0x7, 0x9, 0x100000000, 0x100000001, 0xfb, 0x5, 0x26c1, 0x100]}, 0x18) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f000062cffc)=0x6, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e21, @rand_addr=0x5}}) [ 535.617940] binder: BINDER_SET_CONTEXT_MGR already set [ 535.635015] binder: 2917:2919 ioctl 40046207 0 returned -16 [ 535.648233] binder: 2917:2919 ERROR: BC_REGISTER_LOOPER called without request 13:26:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x20000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:55 executing program 6: r0 = creat(&(0x7f0000000180)='./file1\x00', 0x43) fallocate(r0, 0x20, 0x0, 0x1405) [ 535.720222] binder: undelivered TRANSACTION_COMPLETE 13:26:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ff, 0x2800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) kcmp(r1, r1, 0x0, r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) [ 535.832180] binder: 2982:2986 ERROR: BC_REGISTER_LOOPER called without request 13:26:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x0) getgroups(0x1, &(0x7f0000000040)=[0x0]) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r2) [ 535.892579] FAULT_INJECTION: forcing a failure. [ 535.892579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.904602] CPU: 1 PID: 2981 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 535.911546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.920917] Call Trace: [ 535.923520] dump_stack+0x1c9/0x2b4 [ 535.927165] ? dump_stack_print_info.cold.2+0x52/0x52 [ 535.932355] ? zap_class+0x740/0x740 [ 535.936069] should_fail.cold.4+0xa/0x1a [ 535.940128] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 535.945235] ? graph_lock+0x170/0x170 [ 535.949038] ? is_bpf_text_address+0xd7/0x170 [ 535.953530] ? find_held_lock+0x36/0x1c0 [ 535.957587] ? __lock_is_held+0xb5/0x140 [ 535.961654] ? check_same_owner+0x340/0x340 [ 535.965973] ? rcu_note_context_switch+0x730/0x730 [ 535.970908] __alloc_pages_nodemask+0x36e/0xdb0 [ 535.975568] ? lock_downgrade+0x8f0/0x8f0 [ 535.979726] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 535.984734] ? graph_lock+0x170/0x170 [ 535.988614] ? __lock_is_held+0xb5/0x140 [ 535.992665] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 535.997079] ? __lock_is_held+0xb5/0x140 [ 536.001154] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 536.006688] alloc_pages_current+0x10c/0x210 [ 536.011094] __get_free_pages+0xf/0x40 [ 536.014974] mmu_topup_memory_caches+0x1f8/0x3a0 [ 536.019720] ? kvm_apic_has_interrupt+0xe9/0x230 [ 536.024474] kvm_mmu_load+0x21/0x10e0 [ 536.028276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.033827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.039372] vcpu_enter_guest+0x3aa6/0x6090 [ 536.043696] ? kvm_set_msr_common+0x26a0/0x26a0 [ 536.048372] ? perf_trace_lock+0x920/0x920 [ 536.052606] ? vmx_vcpu_reset+0x1040/0x1040 [ 536.056927] ? graph_lock+0x170/0x170 [ 536.060754] ? __lock_is_held+0xb5/0x140 [ 536.064818] ? lock_acquire+0x1e4/0x540 [ 536.068784] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 536.073802] ? lock_release+0xa30/0xa30 [ 536.077800] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 536.083071] ? kvm_arch_dev_ioctl+0x610/0x610 [ 536.087564] ? preempt_notifier_dec+0x20/0x20 [ 536.092062] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 536.096895] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 536.101924] kvm_vcpu_ioctl+0x7b8/0x1300 [ 536.105982] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 536.111694] ? find_held_lock+0x36/0x1c0 [ 536.115759] ? lock_downgrade+0x8f0/0x8f0 [ 536.119909] ? rcu_is_watching+0x8c/0x150 [ 536.124049] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 536.128458] ? __fget+0x414/0x670 [ 536.131921] ? match_held_lock+0x821/0x8d0 [ 536.136149] ? expand_files.part.8+0x9c0/0x9c0 [ 536.140724] ? kasan_check_write+0x14/0x20 [ 536.144966] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 536.149903] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 536.155603] do_vfs_ioctl+0x1de/0x1720 [ 536.159488] ? ioctl_preallocate+0x300/0x300 [ 536.163884] ? __fget_light+0x2f7/0x440 [ 536.167857] ? fget_raw+0x20/0x20 [ 536.171301] ? __sb_end_write+0xac/0xe0 [ 536.175268] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 536.180796] ? fput+0x130/0x1a0 [ 536.184063] ? ksys_write+0x1ae/0x260 [ 536.187866] ? security_file_ioctl+0x94/0xc0 [ 536.192268] ksys_ioctl+0xa9/0xd0 [ 536.195714] __x64_sys_ioctl+0x73/0xb0 [ 536.199601] do_syscall_64+0x1b9/0x820 [ 536.203478] ? finish_task_switch+0x1d2/0x850 [ 536.207963] ? syscall_return_slowpath+0x5e0/0x5e0 [ 536.212893] ? syscall_return_slowpath+0x31d/0x5e0 [ 536.217819] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 536.223180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.228036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.233224] RIP: 0033:0x455b29 [ 536.236401] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 536.255862] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.263575] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 536.270842] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 536.278100] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 536.285359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 13:26:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1", 0xa, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 536.292626] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000004f 13:26:56 executing program 4 (fault-call:7 fault-nth:80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x7}}}}}, 0x0) 13:26:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000000000000500000000000000bc0b0000000000000500000000000002a1020000000000000200000000000000130a000000000000ff7f000000000000b71b01c0000000000800000000000000490b0000000000000000000000000000bd0b00000000000001800000000000001909000a000000000600000000000000"]) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = getpid() openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x0, r3}) mremap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f0000004000/0x2000)=nil) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x19, 0x80800, 0xfff, &(0x7f0000000140)) [ 536.492898] FAULT_INJECTION: forcing a failure. [ 536.492898] name failslab, interval 1, probability 0, space 0, times 0 [ 536.504310] CPU: 1 PID: 3013 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 536.511240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.520605] Call Trace: [ 536.523200] dump_stack+0x1c9/0x2b4 [ 536.526872] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.532088] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 536.532642] x86/PAT: syz-executor3:3016 map pfn RAM range req write-combining for [mem 0x17ed20000-0x17ed23fff], got write-back [ 536.536946] ? graph_lock+0x170/0x170 [ 536.536964] ? __lock_is_held+0xb5/0x140 [ 536.536992] should_fail.cold.4+0xa/0x1a [ 536.537013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 536.537031] ? __lock_is_held+0xb5/0x140 [ 536.537056] ? graph_lock+0x170/0x170 [ 536.537077] ? find_held_lock+0x36/0x1c0 [ 536.537095] ? __lock_is_held+0xb5/0x140 [ 536.537117] ? check_same_owner+0x340/0x340 [ 536.537135] ? rcu_note_context_switch+0x730/0x730 [ 536.537156] __should_failslab+0x124/0x180 [ 536.537176] should_failslab+0x9/0x14 [ 536.537191] kmem_cache_alloc+0x2af/0x760 [ 536.537210] ? alloc_pages_current+0x114/0x210 [ 536.608144] mmu_topup_memory_caches+0x2fa/0x3a0 [ 536.613114] ? kvm_apic_has_interrupt+0xe9/0x230 [ 536.614178] binder: undelivered transaction 427, put_user failed [ 536.617882] kvm_mmu_load+0x21/0x10e0 [ 536.617902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.617921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.617942] vcpu_enter_guest+0x3aa6/0x6090 [ 536.617961] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 536.617986] ? kvm_set_msr_common+0x26a0/0x26a0 [ 536.618007] ? zap_class+0x740/0x740 [ 536.624511] binder: 2982:2986 ioctl c0306201 200000c0 returned -14 [ 536.628124] ? perf_trace_lock+0x920/0x920 [ 536.628142] ? __lock_acquire+0x7fc/0x5020 [ 536.628160] ? vmx_vcpu_reset+0x1040/0x1040 [ 536.628176] ? graph_lock+0x170/0x170 [ 536.628212] ? __lock_is_held+0xb5/0x140 [ 536.628234] ? lock_acquire+0x1e4/0x540 [ 536.628249] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 536.628271] ? lock_release+0xa30/0xa30 [ 536.680755] binder: BINDER_SET_CONTEXT_MGR already set [ 536.683079] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 536.683098] ? kvm_arch_dev_ioctl+0x610/0x610 [ 536.683112] ? preempt_notifier_dec+0x20/0x20 [ 536.683137] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 536.688875] binder: 2982:2986 ioctl 40046207 0 returned -16 [ 536.692198] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 536.692227] kvm_vcpu_ioctl+0x7b8/0x1300 [ 536.692248] ? kvm_uevent_notify_change.part.31+0x440/0x440 13:26:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x1300, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 536.692277] ? find_held_lock+0x36/0x1c0 [ 536.692306] ? lock_downgrade+0x8f0/0x8f0 [ 536.692325] ? rcu_is_watching+0x8c/0x150 [ 536.692342] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 536.696899] binder: 2982:2986 ERROR: BC_REGISTER_LOOPER called without request [ 536.701585] ? __fget+0x414/0x670 [ 536.701608] ? match_held_lock+0x821/0x8d0 [ 536.701627] ? expand_files.part.8+0x9c0/0x9c0 [ 536.701644] ? kasan_check_write+0x14/0x20 [ 536.701660] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 536.701686] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 536.701704] do_vfs_ioctl+0x1de/0x1720 [ 536.701726] ? ioctl_preallocate+0x300/0x300 [ 536.701747] ? __fget_light+0x2f7/0x440 [ 536.751531] binder: undelivered TRANSACTION_COMPLETE [ 536.753677] ? fget_raw+0x20/0x20 [ 536.753698] ? __sb_end_write+0xac/0xe0 [ 536.753721] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 536.753735] ? fput+0x130/0x1a0 [ 536.753752] ? ksys_write+0x1ae/0x260 [ 536.753779] ? security_file_ioctl+0x94/0xc0 [ 536.753797] ksys_ioctl+0xa9/0xd0 [ 536.753814] __x64_sys_ioctl+0x73/0xb0 [ 536.753832] do_syscall_64+0x1b9/0x820 [ 536.753845] ? finish_task_switch+0x1d2/0x850 [ 536.753861] ? syscall_return_slowpath+0x5e0/0x5e0 [ 536.753879] ? syscall_return_slowpath+0x31d/0x5e0 [ 536.859762] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 536.865118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.869953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.875129] RIP: 0033:0x455b29 [ 536.878302] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 536.897599] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.905296] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 536.912551] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 536.919805] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 536.927148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 536.934406] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000050 13:26:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0) [ 536.999676] x86/PAT: syz-executor3:3026 map pfn RAM range req write-combining for [mem 0x17ed20000-0x17ed23fff], got write-back [ 537.012516] binder: 3024:3025 ERROR: BC_REGISTER_LOOPER called without request 13:26:57 executing program 4 (fault-call:7 fault-nth:81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 537.246985] FAULT_INJECTION: forcing a failure. [ 537.246985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.258856] CPU: 0 PID: 3037 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 537.265794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.275178] Call Trace: [ 537.277781] dump_stack+0x1c9/0x2b4 [ 537.281419] ? dump_stack_print_info.cold.2+0x52/0x52 [ 537.286623] should_fail.cold.4+0xa/0x1a [ 537.290686] ? find_held_lock+0x36/0x1c0 [ 537.294753] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 537.299858] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 537.304711] ? zap_class+0x740/0x740 [ 537.308431] ? perf_trace_lock+0x920/0x920 [ 537.312671] ? find_held_lock+0x36/0x1c0 [ 537.316737] ? graph_lock+0x170/0x170 [ 537.320544] ? lock_acquire+0x1e4/0x540 [ 537.324528] ? lock_downgrade+0x8f0/0x8f0 [ 537.328705] __alloc_pages_nodemask+0x36e/0xdb0 [ 537.333383] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 537.338402] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 537.342836] ? __lock_is_held+0xb5/0x140 [ 537.346913] ? check_same_owner+0x340/0x340 [ 537.351248] cache_grow_begin+0x91/0x710 [ 537.355319] kmem_cache_alloc+0x689/0x760 [ 537.359476] ? alloc_pages_current+0x114/0x210 [ 537.364068] mmu_topup_memory_caches+0x2fa/0x3a0 [ 537.368828] ? kvm_apic_has_interrupt+0xe9/0x230 [ 537.373596] kvm_mmu_load+0x21/0x10e0 [ 537.377404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.382949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.388496] vcpu_enter_guest+0x3aa6/0x6090 [ 537.392826] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 537.397075] ? kvm_set_msr_common+0x26a0/0x26a0 [ 537.401762] ? zap_class+0x740/0x740 [ 537.405484] ? perf_trace_lock+0x920/0x920 [ 537.409728] ? __lock_acquire+0x7fc/0x5020 [ 537.413974] ? vmx_vcpu_reset+0x1040/0x1040 [ 537.418306] ? graph_lock+0x170/0x170 [ 537.422135] ? __lock_is_held+0xb5/0x140 [ 537.426213] ? lock_acquire+0x1e4/0x540 [ 537.430218] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 537.435432] ? lock_release+0xa30/0xa30 [ 537.439407] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 537.444684] ? kvm_arch_dev_ioctl+0x610/0x610 [ 537.449178] ? preempt_notifier_dec+0x20/0x20 [ 537.453709] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 537.458562] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 537.463604] kvm_vcpu_ioctl+0x7b8/0x1300 [ 537.467683] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 537.473409] ? find_held_lock+0x36/0x1c0 [ 537.477483] ? lock_downgrade+0x8f0/0x8f0 [ 537.481651] ? rcu_is_watching+0x8c/0x150 [ 537.485808] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 537.490239] ? __fget+0x414/0x670 [ 537.493699] ? match_held_lock+0x821/0x8d0 [ 537.497938] ? expand_files.part.8+0x9c0/0x9c0 [ 537.502524] ? kasan_check_write+0x14/0x20 [ 537.506763] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 537.511705] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 537.517421] do_vfs_ioctl+0x1de/0x1720 [ 537.521316] ? ioctl_preallocate+0x300/0x300 [ 537.525739] ? __fget_light+0x2f7/0x440 [ 537.529716] ? fget_raw+0x20/0x20 [ 537.533185] ? __sb_end_write+0xac/0xe0 [ 537.537438] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 537.542974] ? fput+0x130/0x1a0 [ 537.546257] ? ksys_write+0x1ae/0x260 [ 537.550065] ? security_file_ioctl+0x94/0xc0 [ 537.554480] ksys_ioctl+0xa9/0xd0 [ 537.557943] __x64_sys_ioctl+0x73/0xb0 [ 537.561843] do_syscall_64+0x1b9/0x820 [ 537.565729] ? syscall_slow_exit_work+0x500/0x500 [ 537.570572] ? syscall_return_slowpath+0x5e0/0x5e0 [ 537.575503] ? syscall_return_slowpath+0x31d/0x5e0 [ 537.580445] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 537.585816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 537.590674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.595865] RIP: 0033:0x455b29 [ 537.599046] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 537.618568] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.626283] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 537.633552] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 537.640818] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 13:26:57 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x7000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x80000) getpeername$netrom(r0, &(0x7f00000001c0)=@full, &(0x7f0000000240)=0x48) r1 = socket$inet6(0xa, 0x1, 0x4) ioctl(r1, 0x4200008916, &(0x7f0000000000)="295ee1311f16f477671070809902072e69cbf01321f44bf0b91093254c45dab1008f784796f5dd3894c4b6b6904d7d6ab4f9d8000000009d16000000") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x242}, {r1, 0x40}, {r2, 0x18}, {r1, 0x40}, {r2, 0x2204}, {r1, 0x2100}, {r1, 0x40}, {r2, 0x1}, {r2, 0x201}], 0x9, 0x101) ioctl$KIOCSOUND(r2, 0x4b2f, 0x3800000000) fcntl$getflags(r1, 0x40b) poll(&(0x7f0000000180)=[{r2, 0x2000}], 0x20000000000003b4, 0x7) [ 537.648087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 537.655362] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000051 [ 537.677613] kvm: pic: non byte read [ 537.684355] kvm: pic: non byte read [ 537.689098] kvm: pic: non byte read 13:26:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast2=0xe0000002}, 0xa) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 13:26:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0xffffffff, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in=@multicast1=0xe0000001, 0x4e24, 0x7ff, 0x4e24, 0x1ff, 0x2, 0xa0, 0x0, 0x73, 0x0, r3}, {0x5, 0x1, 0x7, 0x81, 0x7, 0x1, 0x5, 0x9}, {0x9, 0x4f4, 0x9, 0x5}, 0x0, 0x6e6bb4, 0x2, 0x0, 0x2}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x3506, 0x0, 0x3, 0x7fff, 0x80, 0xfffffffffffffff9, 0x8b2}}, 0xe8) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)="626373568700000018243200001000", 0x10) socket(0x2, 0x1, 0x129) accept4$inet(r2, &(0x7f0000000940), &(0x7f0000000980)=0x10, 0x800) [ 537.700006] kvm: pic: non byte read 13:26:57 executing program 4 (fault-call:7 fault-nth:82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x4}}}}}, 0x0) [ 537.800431] binder: undelivered transaction 429, put_user failed [ 537.809000] binder: 3024:3025 ioctl c0306201 200000c0 returned -14 13:26:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1", 0xa, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 537.846990] binder: BINDER_SET_CONTEXT_MGR already set [ 537.865263] binder: 3024:3059 ioctl 40046207 0 returned -16 [ 537.883281] binder: 3024:3025 ERROR: BC_REGISTER_LOOPER called without request [ 537.902246] binder_alloc: 3024: binder_alloc_buf, no vma [ 537.904548] FAULT_INJECTION: forcing a failure. [ 537.904548] name failslab, interval 1, probability 0, space 0, times 0 [ 537.907865] binder: 3024:3025 transaction failed 29189/-3, size 0-0 line 2967 [ 537.919089] CPU: 1 PID: 3061 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 537.919099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.919103] Call Trace: [ 537.919126] dump_stack+0x1c9/0x2b4 [ 537.919146] ? dump_stack_print_info.cold.2+0x52/0x52 [ 537.919169] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 537.959134] should_fail.cold.4+0xa/0x1a [ 537.963253] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 537.968385] ? kasan_kmalloc+0xc4/0xe0 [ 537.972292] ? kasan_slab_alloc+0x12/0x20 [ 537.976458] ? kmem_cache_alloc+0x12e/0x760 [ 537.980800] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 537.985755] ? kvm_mmu_load+0x21/0x10e0 [ 537.989760] ? vcpu_enter_guest+0x3aa6/0x6090 [ 537.994286] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 537.999318] ? graph_lock+0x170/0x170 13:26:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x4788}}}}}, 0x0) [ 538.003143] ? do_syscall_64+0x1b9/0x820 [ 538.007219] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.012605] ? find_held_lock+0x36/0x1c0 [ 538.016681] ? __lock_is_held+0xb5/0x140 [ 538.020776] ? check_same_owner+0x340/0x340 [ 538.025116] ? rcu_note_context_switch+0x730/0x730 [ 538.030067] __should_failslab+0x124/0x180 [ 538.034323] should_failslab+0x9/0x14 [ 538.038155] kmem_cache_alloc+0x2af/0x760 [ 538.042318] ? alloc_pages_current+0x114/0x210 [ 538.043787] binder: undelivered TRANSACTION_ERROR: 29189 13:26:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x7a000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 538.046907] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 538.046929] mmu_topup_memory_caches+0x2fa/0x3a0 [ 538.046947] ? kvm_apic_has_interrupt+0xe9/0x230 [ 538.046969] kvm_mmu_load+0x21/0x10e0 [ 538.046986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.047003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.081755] vcpu_enter_guest+0x3aa6/0x6090 [ 538.086508] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 538.090742] ? kvm_set_msr_common+0x26a0/0x26a0 [ 538.095401] ? zap_class+0x740/0x740 [ 538.099112] ? perf_trace_lock+0x920/0x920 [ 538.103358] ? __lock_acquire+0x7fc/0x5020 [ 538.107581] ? vmx_vcpu_reset+0x1040/0x1040 [ 538.111892] ? graph_lock+0x170/0x170 [ 538.115693] ? __lock_is_held+0xb5/0x140 [ 538.119752] ? lock_acquire+0x1e4/0x540 [ 538.123722] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 538.128733] ? lock_release+0xa30/0xa30 [ 538.132694] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 538.137969] ? kvm_arch_dev_ioctl+0x610/0x610 [ 538.142451] ? preempt_notifier_dec+0x20/0x20 [ 538.146952] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 538.151790] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 538.156804] kvm_vcpu_ioctl+0x7b8/0x1300 [ 538.160859] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 538.166574] ? find_held_lock+0x36/0x1c0 [ 538.170629] ? lock_downgrade+0x8f0/0x8f0 [ 538.174767] ? rcu_is_watching+0x8c/0x150 [ 538.178904] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 538.183308] ? __fget+0x414/0x670 [ 538.186754] ? match_held_lock+0x821/0x8d0 [ 538.190985] ? expand_files.part.8+0x9c0/0x9c0 [ 538.195558] ? kasan_check_write+0x14/0x20 [ 538.199788] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 538.204708] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 538.210412] do_vfs_ioctl+0x1de/0x1720 [ 538.214315] ? ioctl_preallocate+0x300/0x300 [ 538.218725] ? __fget_light+0x2f7/0x440 [ 538.222689] ? fget_raw+0x20/0x20 [ 538.226162] ? __sb_end_write+0xac/0xe0 [ 538.230136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.235657] ? fput+0x130/0x1a0 [ 538.238928] ? ksys_write+0x1ae/0x260 [ 538.242726] ? security_file_ioctl+0x94/0xc0 [ 538.247126] ksys_ioctl+0xa9/0xd0 [ 538.250579] __x64_sys_ioctl+0x73/0xb0 [ 538.254456] do_syscall_64+0x1b9/0x820 [ 538.258331] ? syscall_slow_exit_work+0x500/0x500 [ 538.263167] ? syscall_return_slowpath+0x5e0/0x5e0 [ 538.268088] ? syscall_return_slowpath+0x31d/0x5e0 [ 538.273011] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 538.278372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 538.283208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.288397] RIP: 0033:0x455b29 [ 538.291570] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.310866] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.318564] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 538.325820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 538.333079] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 538.340335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 538.347591] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000052 13:26:58 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x80980) r1 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001440)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x421, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@broadcast=0xffffffff}, {@in=@broadcast=0xffffffff, 0x0, 0x32}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1}, 0x0) 13:26:58 executing program 6: r0 = socket$inet(0x2, 0xa, 0x70000000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x328, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_slave_1\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'veth1\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x100, 0x100, 0x130, [@cgroup0={'cgroup\x00', 0x8}, @arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @rand_addr, 0x0, @loopback=0x7f000001, 0x0, @random="72ce35f34121"}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x3a0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000003c0)={0x5, 0x0, 0x100000000, 0x7fffffff}) [ 538.433100] Unknown ioctl 21532 [ 538.454183] binder: undelivered TRANSACTION_COMPLETE 13:26:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000300)={@remote, @multicast1, 0x0}, &(0x7f0000000340)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x14, 0x503224afd1fd948) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'nr0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000800)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast2, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000a40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'yam0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000bc0)=@alg, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/56, 0x38}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/158, 0x9e}, {&(0x7f0000000d40)=""/48, 0x30}, {&(0x7f0000000d80)=""/245, 0xf5}], 0x5, &(0x7f0000000f00)=""/234, 0xea, 0x6}, 0x100000001}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)=""/228, 0xe4}], 0x1, &(0x7f0000001140)=""/121, 0x79, 0x20}, 0x1}, {{&(0x7f00000011c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001240)=""/242, 0xf2}, {&(0x7f0000001340)=""/155, 0x9b}, {&(0x7f0000001400)=""/44, 0x2c}], 0x3, &(0x7f0000002500)=""/92, 0x5c, 0x7}, 0xffffffff}], 0x3, 0x21, &(0x7f0000001480)={0x77359400}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002640)={@local, @local, 0x0}, &(0x7f0000002680)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002d80)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002e00)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002e80)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ec0)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002fc0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000003040)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000003180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000031c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000032c0)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003340)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003380)={0x0, @dev, @local}, &(0x7f00000033c0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003440)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003480)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000003580)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000035c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2c194480}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003600)=ANY=[@ANYBLOB="a8080000", @ANYRES16=r1, @ANYBLOB="100026bd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="bc00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007effffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff0100000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004005e0f000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004004c26000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r7, @ANYBLOB="240102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff07000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004006d0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="2002020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004004000000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004c00000008000600", @ANYRES32=r13, @ANYBLOB="39000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400480f00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000700f80302000000fcff00070e81000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="3801020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001f00000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400040000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400874d000008000100", @ANYRES32=r18, @ANYBLOB="240202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r22, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r23, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040005000000"], 0x8a8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r26 = socket$nl_generic(0x10, 0x3, 0x10) r27 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r26, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r26, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0x2c3, &(0x7f0000004f80)={&(0x7f0000002740)=ANY=[@ANYBLOB="5c008f4a3bd0eb422270f4b49ce64de85c5877d4238825925186de", @ANYRES16=r27, @ANYBLOB="01000000000000000000010000000800010048917c9135f52cf49007fc963fbae03b8aa997ecf55f247e36050ba849c0cecf79c5f52e867fbf5fb355acb70fcf5e5df6ca73c387ad28316f010f3150093ac3f344e564efbf6b118d9ae4d78f6c45a28092218f5ba1321d9fed9e37b684e80563c29f9f040000000000000022df9fd541fedbe342afd189e8e27b6e0c0b7319f551d5f4164c511cc3baee84911d509868e604b84d5aea5a645b25409cb3718a059bbf3ae244d5d982ea1c25d7dc9caa6210c8aa85ad5b3d7e4ef38b1273c8a44a0a09d5c9efc2d1dfb250a825883749bd22b236040ee49d1bd07973afaf2958809828d64d6ca1cb0fe873933b56e474bf391692838297af0de632c4463b067ba97001547232a57783c42c5fae344e7375271ab31baf3a20746f4743cae5fff56fbbdca9ebe520ecef70c4e5b7ad64187c5b7180868af3de0ac3ad95c1277899730ac7c7ff32884f449053da15e9af71cf681e430cde9bd0341d82a46746302a96d752624c655f49499b642a989f47f0fa3eb1d9fcd38d64ea3509686a701ec456fdb3de969ebcb9b8c03ac690b514ce960e1163b2506c0e742735d86e2df2212fdc47629b16e08d", @ANYRES32=r28, @ANYBLOB="40000200"], 0x5c}, 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f00000e5000)='/dev/snd/controlC#\x00', 0x1, 0x0) 13:26:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x6}}}}}, 0x0) 13:26:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000080), 0x0, r2, 0x6}) [ 538.486304] binder: 3092:3099 ERROR: BC_REGISTER_LOOPER called without request 13:26:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x19, 0x80006, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x27, 0x1, @buffer={0x0, 0x32, &(0x7f0000000240)=""/50}, &(0x7f0000000280)="c8650e7375838fea00cb2d7f9c98467aef6dc5cdf7a204151ad12d0119622f7c32d3b6ae09b416", &(0x7f00000002c0)=""/51, 0x2, 0x31, 0xffffffffffffffff, &(0x7f0000000300)}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000500217f05007f0076080800dbc3d10ff3a8af518642d4855d50dbbedff3f766c03d44010bef"], &(0x7f00000000c0)=0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000000000008002000080020000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000400100000000000000c614000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000f000000ffffffff000000000000000000000000000000000000000000000000000000000000000000e59b844800000000000000000000000000000000000000000000003a99d4b800000000000000000000000091a000000000000e000000000000000000000000000000000000000000000000000000000000000000002ee8e9333d34b18e1f0fac1bc8310000000000ffffffff000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e182365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000204000000ff0600ff00000000e0000001ffffff00000000ff00000000000000000000000000000000000000000000000000ff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffff00ffff0000000000000000000001008001000701ff0003ff0065727370616e300000000000000000006263736830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000020000000000000000000800100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f000001ac1414bb06000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028000000000000000000000000000000040000000000ea4ba9e21aca2871d69c664c054a5a7062c3a605"], 0x4f8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r0, 0x107, 0x11, &(0x7f0000000100)=@req3, 0x1c) 13:26:58 executing program 4 (fault-call:7 fault-nth:83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 538.814459] FAULT_INJECTION: forcing a failure. [ 538.814459] name failslab, interval 1, probability 0, space 0, times 0 [ 538.825823] CPU: 1 PID: 3129 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 538.832751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.842108] Call Trace: [ 538.844711] dump_stack+0x1c9/0x2b4 [ 538.848350] ? dump_stack_print_info.cold.2+0x52/0x52 [ 538.853546] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 538.858408] should_fail.cold.4+0xa/0x1a [ 538.862484] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 538.867683] ? kasan_kmalloc+0xc4/0xe0 [ 538.871583] ? kasan_slab_alloc+0x12/0x20 [ 538.875732] ? kmem_cache_alloc+0x12e/0x760 [ 538.880078] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 538.885011] ? kvm_mmu_load+0x21/0x10e0 [ 538.888992] ? vcpu_enter_guest+0x3aa6/0x6090 [ 538.893491] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 538.898515] ? graph_lock+0x170/0x170 [ 538.902351] ? do_syscall_64+0x1b9/0x820 [ 538.906441] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.911834] ? find_held_lock+0x36/0x1c0 [ 538.915905] ? __lock_is_held+0xb5/0x140 [ 538.919983] ? check_same_owner+0x340/0x340 [ 538.924395] ? rcu_note_context_switch+0x730/0x730 [ 538.929344] __should_failslab+0x124/0x180 [ 538.933584] should_failslab+0x9/0x14 [ 538.937396] kmem_cache_alloc+0x2af/0x760 [ 538.941551] ? alloc_pages_current+0x114/0x210 [ 538.946148] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 538.951094] mmu_topup_memory_caches+0x2fa/0x3a0 [ 538.955858] ? kvm_apic_has_interrupt+0xe9/0x230 [ 538.960637] kvm_mmu_load+0x21/0x10e0 [ 538.964445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.970003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.975552] vcpu_enter_guest+0x3aa6/0x6090 [ 538.979893] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 538.984154] ? kvm_set_msr_common+0x26a0/0x26a0 [ 538.988838] ? perf_trace_lock+0x920/0x920 [ 538.993084] ? __lock_acquire+0x7fc/0x5020 [ 538.997327] ? vmx_vcpu_reset+0x1040/0x1040 [ 539.001654] ? graph_lock+0x170/0x170 [ 539.005470] ? __lock_acquire+0x7fc/0x5020 [ 539.009725] ? __lock_is_held+0xb5/0x140 [ 539.013799] ? lock_acquire+0x1e4/0x540 [ 539.017777] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 539.022804] ? lock_release+0xa30/0xa30 [ 539.026782] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 539.032078] ? kvm_arch_dev_ioctl+0x610/0x610 [ 539.036588] ? preempt_notifier_dec+0x20/0x20 [ 539.041099] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 539.045942] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 539.050973] kvm_vcpu_ioctl+0x7b8/0x1300 [ 539.055055] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 539.060771] ? find_held_lock+0x36/0x1c0 [ 539.064865] ? find_held_lock+0x36/0x1c0 [ 539.068939] ? lock_downgrade+0x8f0/0x8f0 [ 539.073103] ? kasan_check_read+0x11/0x20 [ 539.077248] ? rcu_is_watching+0x8c/0x150 [ 539.082132] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 539.086557] ? __fget+0x414/0x670 [ 539.090020] ? match_held_lock+0x821/0x8d0 [ 539.094261] ? expand_files.part.8+0x9c0/0x9c0 [ 539.098868] ? kasan_check_write+0x14/0x20 [ 539.103123] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 539.108067] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 539.113790] do_vfs_ioctl+0x1de/0x1720 [ 539.117679] ? __lock_is_held+0xb5/0x140 [ 539.121746] ? ioctl_preallocate+0x300/0x300 [ 539.126157] ? __fget_light+0x2f7/0x440 [ 539.130137] ? fget_raw+0x20/0x20 [ 539.133589] ? __sb_end_write+0xac/0xe0 [ 539.137571] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.143109] ? fput+0x130/0x1a0 [ 539.146394] ? ksys_write+0x1ae/0x260 [ 539.150205] ? security_file_ioctl+0x94/0xc0 [ 539.154620] ksys_ioctl+0xa9/0xd0 [ 539.158079] __x64_sys_ioctl+0x73/0xb0 [ 539.161974] do_syscall_64+0x1b9/0x820 [ 539.165863] ? finish_task_switch+0x1d2/0x850 [ 539.170360] ? syscall_return_slowpath+0x5e0/0x5e0 [ 539.175291] ? syscall_return_slowpath+0x31d/0x5e0 [ 539.180231] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 539.185599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.190452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.195639] RIP: 0033:0x455b29 [ 539.198817] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.218274] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.225982] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 539.233707] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 539.240976] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 539.248256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 539.255528] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000053 13:26:59 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfe800000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:26:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa}}}, &(0x7f0000000040)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:26:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) 13:26:59 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @random="7d79e5afaec3", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/241, 0xf2d}) 13:26:59 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x20008) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000068fe8)="ff0209000000000100000000000000001500000000000205", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000b0c000), 0x8) 13:26:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1", 0xa, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 539.294249] binder: undelivered transaction 432, put_user failed [ 539.325195] binder: 3092:3099 ioctl c0306201 200000c0 returned -14 13:26:59 executing program 4 (fault-call:7 fault-nth:84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:26:59 executing program 3: r0 = socket(0x10, 0x803, 0x6) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0xd6c, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}}, 0x32) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}) [ 539.390900] binder: BINDER_SET_CONTEXT_MGR already set [ 539.396599] binder: 3092:3099 ioctl 40046207 0 returned -16 [ 539.425237] binder: 3092:3099 ERROR: BC_REGISTER_LOOPER called without request [ 539.489773] netlink: 2 bytes leftover after parsing attributes in process `syz-executor3'. [ 539.490865] FAULT_INJECTION: forcing a failure. [ 539.490865] name failslab, interval 1, probability 0, space 0, times 0 [ 539.510078] CPU: 0 PID: 3155 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 539.517020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.526418] Call Trace: [ 539.529033] dump_stack+0x1c9/0x2b4 [ 539.532684] ? dump_stack_print_info.cold.2+0x52/0x52 [ 539.537884] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 539.542744] should_fail.cold.4+0xa/0x1a [ 539.546814] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 539.551923] ? kasan_kmalloc+0xc4/0xe0 [ 539.555813] ? kasan_slab_alloc+0x12/0x20 [ 539.559959] ? kmem_cache_alloc+0x12e/0x760 [ 539.564294] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 539.569236] ? kvm_mmu_load+0x21/0x10e0 [ 539.573221] ? vcpu_enter_guest+0x3aa6/0x6090 [ 539.577726] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 539.582758] ? graph_lock+0x170/0x170 [ 539.586573] ? do_syscall_64+0x1b9/0x820 [ 539.590645] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.596033] ? find_held_lock+0x36/0x1c0 [ 539.600227] ? __lock_is_held+0xb5/0x140 [ 539.604312] ? check_same_owner+0x340/0x340 [ 539.608629] ? rcu_note_context_switch+0x730/0x730 [ 539.613560] __should_failslab+0x124/0x180 [ 539.617786] should_failslab+0x9/0x14 [ 539.621576] kmem_cache_alloc+0x2af/0x760 [ 539.625726] ? alloc_pages_current+0x114/0x210 [ 539.630298] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 539.635310] mmu_topup_memory_caches+0x2fa/0x3a0 [ 539.640229] ? kvm_apic_has_interrupt+0xe9/0x230 [ 539.644980] kvm_mmu_load+0x21/0x10e0 [ 539.648784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.654320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.659851] vcpu_enter_guest+0x3aa6/0x6090 [ 539.664163] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 539.668401] ? kvm_set_msr_common+0x26a0/0x26a0 [ 539.673064] ? zap_class+0x740/0x740 [ 539.676770] ? perf_trace_lock+0x920/0x920 [ 539.681002] ? __lock_acquire+0x7fc/0x5020 [ 539.685235] ? vmx_vcpu_reset+0x1040/0x1040 [ 539.689549] ? graph_lock+0x170/0x170 [ 539.693357] ? __lock_is_held+0xb5/0x140 [ 539.697415] ? lock_acquire+0x1e4/0x540 [ 539.701387] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 539.706401] ? lock_release+0xa30/0xa30 [ 539.710364] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 539.715640] ? kvm_arch_dev_ioctl+0x610/0x610 [ 539.720141] ? preempt_notifier_dec+0x20/0x20 [ 539.724652] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 539.729484] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 539.734502] kvm_vcpu_ioctl+0x7b8/0x1300 [ 539.738568] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 539.744278] ? find_held_lock+0x36/0x1c0 [ 539.748343] ? lock_downgrade+0x8f0/0x8f0 [ 539.752494] ? rcu_is_watching+0x8c/0x150 [ 539.756630] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 539.761047] ? __fget+0x414/0x670 [ 539.764493] ? match_held_lock+0x821/0x8d0 [ 539.768718] ? expand_files.part.8+0x9c0/0x9c0 [ 539.773294] ? kasan_check_write+0x14/0x20 [ 539.777520] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 539.782448] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 539.788152] do_vfs_ioctl+0x1de/0x1720 [ 539.792042] ? ioctl_preallocate+0x300/0x300 [ 539.796537] ? __fget_light+0x2f7/0x440 [ 539.800502] ? fget_raw+0x20/0x20 [ 539.803949] ? __sb_end_write+0xac/0xe0 [ 539.807926] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.813451] ? fput+0x130/0x1a0 [ 539.816719] ? ksys_write+0x1ae/0x260 [ 539.820524] ? security_file_ioctl+0x94/0xc0 [ 539.824934] ksys_ioctl+0xa9/0xd0 [ 539.828380] __x64_sys_ioctl+0x73/0xb0 [ 539.832267] do_syscall_64+0x1b9/0x820 [ 539.836144] ? finish_task_switch+0x1d2/0x850 [ 539.840634] ? syscall_return_slowpath+0x5e0/0x5e0 [ 539.845552] ? syscall_return_slowpath+0x31d/0x5e0 [ 539.850477] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 539.855844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.860684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.865874] RIP: 0033:0x455b29 [ 539.869048] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.888426] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.896128] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 539.903384] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 539.910639] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 539.917918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 539.925186] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000054 13:26:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x74, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:26:59 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x0, 0x4, [0x7fff]}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0x4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) keyctl$unlink(0xb, r1, 0x0) 13:26:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x608}}}}}, 0x0) [ 539.936646] netlink: 2 bytes leftover after parsing attributes in process `syz-executor3'. [ 539.943502] binder: undelivered TRANSACTION_COMPLETE 13:27:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000e7018000006a0a00ff0040f60061185c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) msgget$private(0x0, 0x8e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x1d}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e21, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0xe, r1, r2}, {0x4, 0x7ff, 0x2, 0x3, 0x2, 0xe7, 0x7, 0x7}, {0x7fffffff, 0xd8, 0x1f, 0x5}, 0x2, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4d3, 0x3f}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3501, 0x1, 0x2, 0x8, 0x6, 0x10001, 0x80}}, 0xe8) 13:27:00 executing program 1: r0 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r0, 0x0, 0x0, 0x73e0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha1-avx)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f00007ed000)=0x3f00, 0xffa) [ 540.006649] binder: 3169:3172 ERROR: BC_REGISTER_LOOPER called without request 13:27:00 executing program 4 (fault-call:7 fault-nth:85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="0a0775b005e381e5b371b60ced5c6adbb70d5df0a39de028a71fdf8217ad400000", 0x21) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="ade03d85f21b3e358910033c170b745c3613014591c4782075fdb77e268d55c6268ea120775314ec083cdfd640eb480353eab214c3e983a93b180ee97a4d537a17cf06dec7bc0d016a0cf5075cdfc931bf755536b1", 0x55, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x100) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000001c0)={0xb51, 0x4, 0x5, 0x0, 0xa7c, 0x9f55, 0x4}, 0xc) 13:27:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0xd8, &(0x7f0000000080)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ff1cadf7ef13f54f791eac14ffbbe00000010000000000089078"], 0x0) [ 540.325428] FAULT_INJECTION: forcing a failure. [ 540.325428] name failslab, interval 1, probability 0, space 0, times 0 [ 540.336792] CPU: 0 PID: 3205 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 540.343727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.353090] Call Trace: [ 540.355695] dump_stack+0x1c9/0x2b4 [ 540.359336] ? dump_stack_print_info.cold.2+0x52/0x52 [ 540.364541] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 540.369399] should_fail.cold.4+0xa/0x1a [ 540.373457] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 540.378549] ? kasan_kmalloc+0xc4/0xe0 [ 540.382424] ? kasan_slab_alloc+0x12/0x20 [ 540.386562] ? kmem_cache_alloc+0x12e/0x760 [ 540.390872] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 540.395790] ? kvm_mmu_load+0x21/0x10e0 [ 540.399754] ? vcpu_enter_guest+0x3aa6/0x6090 [ 540.404236] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 540.409242] ? graph_lock+0x170/0x170 [ 540.413055] ? do_syscall_64+0x1b9/0x820 [ 540.417106] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.422473] ? find_held_lock+0x36/0x1c0 [ 540.426528] ? __lock_is_held+0xb5/0x140 [ 540.430591] ? check_same_owner+0x340/0x340 [ 540.434903] ? rcu_note_context_switch+0x730/0x730 [ 540.439828] __should_failslab+0x124/0x180 [ 540.444072] should_failslab+0x9/0x14 [ 540.447862] kmem_cache_alloc+0x2af/0x760 [ 540.452000] ? alloc_pages_current+0x114/0x210 [ 540.456925] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 540.461847] mmu_topup_memory_caches+0x2fa/0x3a0 [ 540.466589] ? kvm_apic_has_interrupt+0xe9/0x230 [ 540.471341] kvm_mmu_load+0x21/0x10e0 [ 540.475132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.480663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.486192] vcpu_enter_guest+0x3aa6/0x6090 [ 540.490503] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 540.494758] ? kvm_set_msr_common+0x26a0/0x26a0 [ 540.499431] ? zap_class+0x740/0x740 [ 540.503154] ? perf_trace_lock+0x920/0x920 [ 540.507381] ? __lock_acquire+0x7fc/0x5020 [ 540.511608] ? vmx_vcpu_reset+0x1040/0x1040 [ 540.515916] ? graph_lock+0x170/0x170 [ 540.519730] ? __lock_is_held+0xb5/0x140 [ 540.523785] ? lock_acquire+0x1e4/0x540 [ 540.527745] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 540.532758] ? lock_release+0xa30/0xa30 [ 540.536718] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 540.541985] ? kvm_arch_dev_ioctl+0x610/0x610 [ 540.546478] ? preempt_notifier_dec+0x20/0x20 [ 540.550981] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 540.555820] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 540.560838] kvm_vcpu_ioctl+0x7b8/0x1300 [ 540.564892] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 540.570602] ? find_held_lock+0x36/0x1c0 [ 540.574670] ? lock_downgrade+0x8f0/0x8f0 [ 540.578820] ? rcu_is_watching+0x8c/0x150 [ 540.582955] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 540.587364] ? __fget+0x414/0x670 [ 540.590810] ? match_held_lock+0x821/0x8d0 [ 540.595049] ? expand_files.part.8+0x9c0/0x9c0 [ 540.599622] ? kasan_check_write+0x14/0x20 [ 540.603848] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 540.608770] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 540.614468] do_vfs_ioctl+0x1de/0x1720 [ 540.618349] ? ioctl_preallocate+0x300/0x300 [ 540.622745] ? __fget_light+0x2f7/0x440 [ 540.626708] ? fget_raw+0x20/0x20 [ 540.630157] ? __sb_end_write+0xac/0xe0 [ 540.634129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 540.639661] ? fput+0x130/0x1a0 [ 540.642927] ? ksys_write+0x1ae/0x260 [ 540.646718] ? security_file_ioctl+0x94/0xc0 [ 540.651129] ksys_ioctl+0xa9/0xd0 [ 540.654581] __x64_sys_ioctl+0x73/0xb0 [ 540.658460] do_syscall_64+0x1b9/0x820 [ 540.662333] ? finish_task_switch+0x1d2/0x850 [ 540.666819] ? syscall_return_slowpath+0x5e0/0x5e0 [ 540.671737] ? syscall_return_slowpath+0x31d/0x5e0 [ 540.676668] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 540.682034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.686873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.692069] RIP: 0033:0x455b29 [ 540.695248] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.714621] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.722322] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 540.729580] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 540.736834] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 540.744881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 540.752150] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000055 [ 540.819583] binder: BINDER_SET_CONTEXT_MGR already set [ 540.825320] binder: 3169:3172 ioctl 40046207 0 returned -16 [ 540.831430] binder: 3169:3172 ERROR: BC_REGISTER_LOOPER called without request [ 540.882209] binder: undelivered TRANSACTION_COMPLETE 13:27:01 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfe80000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 13:27:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x60103, 0x0) read(r0, &(0x7f0000000080)=""/222, 0xde) connect$unix(r0, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x2, 0x20080) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 13:27:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xff, 0x40001) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0xfff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r2}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_timeval(r3, 0x1, 0x40017, &(0x7f00000002c0), 0xd) 13:27:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x6c, "0a8e24a756e099a1d1d44d476a6ad3e7263692a819a3b0ace455dce4dea1ffc68468a807058ca20bd830a23362fa0cab4828df02f7649b4bf4598be04b285b4193c7f5f44106a3225cf97cc505c68fb4059060b19d376e5283b708cefa66073e9bd4121e2a010c95a53b1606"}, &(0x7f00000000c0)=0x74) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x84) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949e", 0xf, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x700000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:01 executing program 4 (fault-call:7 fault-nth:86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 541.133362] binder: 3229:3235 ERROR: BC_REGISTER_LOOPER called without request [ 541.168643] FAULT_INJECTION: forcing a failure. [ 541.168643] name failslab, interval 1, probability 0, space 0, times 0 [ 541.180008] CPU: 1 PID: 3233 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 541.186935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.196303] Call Trace: [ 541.198883] dump_stack+0x1c9/0x2b4 [ 541.202522] ? dump_stack_print_info.cold.2+0x52/0x52 [ 541.207704] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 541.212546] should_fail.cold.4+0xa/0x1a [ 541.216599] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 541.221694] ? kasan_kmalloc+0xc4/0xe0 [ 541.225571] ? kasan_slab_alloc+0x12/0x20 [ 541.229713] ? kmem_cache_alloc+0x12e/0x760 [ 541.234031] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 541.238957] ? kvm_mmu_load+0x21/0x10e0 [ 541.242919] ? vcpu_enter_guest+0x3aa6/0x6090 [ 541.247414] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 541.252424] ? graph_lock+0x170/0x170 [ 541.256212] ? do_syscall_64+0x1b9/0x820 [ 541.260263] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 541.265622] ? find_held_lock+0x36/0x1c0 [ 541.269679] ? __lock_is_held+0xb5/0x140 [ 541.273738] ? check_same_owner+0x340/0x340 [ 541.278077] ? rcu_note_context_switch+0x730/0x730 [ 541.283007] __should_failslab+0x124/0x180 [ 541.287242] should_failslab+0x9/0x14 [ 541.291034] kmem_cache_alloc+0x2af/0x760 [ 541.295175] ? alloc_pages_current+0x114/0x210 [ 541.299746] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 541.304671] mmu_topup_memory_caches+0x2fa/0x3a0 [ 541.309416] ? kvm_apic_has_interrupt+0xe9/0x230 [ 541.314168] kvm_mmu_load+0x21/0x10e0 [ 541.317967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.323493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.329029] vcpu_enter_guest+0x3aa6/0x6090 [ 541.333341] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 541.337572] ? kvm_set_msr_common+0x26a0/0x26a0 [ 541.342235] ? perf_trace_lock+0x920/0x920 [ 541.346461] ? __lock_acquire+0x7fc/0x5020 [ 541.350685] ? vmx_vcpu_reset+0x1040/0x1040 [ 541.355010] ? graph_lock+0x170/0x170 [ 541.358812] ? __lock_acquire+0x7fc/0x5020 [ 541.363048] ? __lock_is_held+0xb5/0x140 [ 541.367103] ? lock_acquire+0x1e4/0x540 [ 541.371068] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 541.376080] ? lock_release+0xa30/0xa30 [ 541.380061] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 541.385325] ? kvm_arch_dev_ioctl+0x610/0x610 [ 541.389809] ? preempt_notifier_dec+0x20/0x20 [ 541.394302] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 541.399134] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 541.404160] kvm_vcpu_ioctl+0x7b8/0x1300 [ 541.408219] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 541.413917] ? find_held_lock+0x36/0x1c0 [ 541.418147] ? find_held_lock+0x36/0x1c0 [ 541.422205] ? lock_downgrade+0x8f0/0x8f0 [ 541.426346] ? kasan_check_read+0x11/0x20 [ 541.430480] ? rcu_is_watching+0x8c/0x150 [ 541.434622] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 541.439044] ? __fget+0x414/0x670 [ 541.442488] ? match_held_lock+0x821/0x8d0 [ 541.446715] ? expand_files.part.8+0x9c0/0x9c0 [ 541.451287] ? kasan_check_write+0x14/0x20 [ 541.455596] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 541.460521] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 541.466219] do_vfs_ioctl+0x1de/0x1720 [ 541.470094] ? __lock_is_held+0xb5/0x140 [ 541.474146] ? ioctl_preallocate+0x300/0x300 [ 541.478542] ? __fget_light+0x2f7/0x440 [ 541.482505] ? fget_raw+0x20/0x20 [ 541.485946] ? __sb_end_write+0xac/0xe0 [ 541.489914] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 541.495436] ? fput+0x130/0x1a0 [ 541.498703] ? ksys_write+0x1ae/0x260 [ 541.502496] ? security_file_ioctl+0x94/0xc0 [ 541.506894] ksys_ioctl+0xa9/0xd0 [ 541.510356] __x64_sys_ioctl+0x73/0xb0 [ 541.514237] do_syscall_64+0x1b9/0x820 [ 541.518110] ? finish_task_switch+0x1d2/0x850 [ 541.522594] ? syscall_return_slowpath+0x5e0/0x5e0 [ 541.527520] ? syscall_return_slowpath+0x31d/0x5e0 [ 541.532441] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 541.537796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.542635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 541.547810] RIP: 0033:0x455b29 [ 541.550981] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 541.570322] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.578026] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 13:27:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(anubis))\x00'}, 0x58) r3 = dup2(r1, r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) 13:27:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) [ 541.585282] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 541.592536] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 541.599799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 541.607054] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000056 13:27:01 executing program 4 (fault-call:7 fault-nth:87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:01 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x617c) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x40100) ioctl$TCSETA(r2, 0x5406, &(0x7f0000001100)={0x7fffffff, 0x4, 0x8, 0x4, 0x80000000, 0x6, 0x8, 0x7, 0x7, 0x1}) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x63) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0xc0045520, &(0x7f0000000000)=""/27) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/4096) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001900)={'teql0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002040)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000002140)=0xe8) clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/24, 0x18}, {&(0x7f00000021c0)=""/193, 0xc1}], 0x2, &(0x7f0000002300)=""/4096, 0x1000, 0x10001}, 0x401}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003300)=""/179, 0xb3}, {&(0x7f00000033c0)=""/1, 0x1}, {&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/159, 0x9f}, {&(0x7f0000003540)=""/249, 0xf9}, {&(0x7f0000003640)=""/78, 0x4e}], 0x6, 0x0, 0x0, 0x1}, 0xfffffffffffffffc}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003740)=""/214, 0xd6}, {&(0x7f0000003840)=""/76, 0x4c}, {&(0x7f00000038c0)=""/113, 0x71}, {&(0x7f0000003940)=""/17, 0x11}, {&(0x7f0000003980)=""/73, 0x49}], 0x5, &(0x7f0000003a80)=""/218, 0xda, 0x5}, 0x9}, {{&(0x7f0000003b80)=@llc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003c00)=""/71, 0x47}, {&(0x7f0000003c80)=""/3, 0x3}, {&(0x7f0000003cc0)=""/203, 0xcb}, {&(0x7f0000003dc0)=""/11, 0xb}, {&(0x7f0000003e00)=""/150, 0x96}, {&(0x7f0000003ec0)=""/214, 0xd6}], 0x6, &(0x7f0000004040)}, 0xffff}, {{&(0x7f0000004080)=@nl=@unspec, 0x80, &(0x7f0000004180)=[{&(0x7f0000004100)=""/97, 0x61}], 0x1, &(0x7f00000041c0)=""/75, 0x4b, 0x21}, 0x5}, {{&(0x7f0000004240)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004340)=[{&(0x7f00000042c0)=""/110, 0x6e}], 0x1, &(0x7f0000004380)=""/10, 0xa, 0x3}, 0x40}, {{&(0x7f00000043c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004440)=""/57, 0x39}], 0x1, 0x0, 0x0, 0x3}, 0x1ff}, {{&(0x7f00000044c0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000005640)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/213, 0xd5}], 0x2, &(0x7f0000005680)=""/30, 0x1e, 0x4}, 0x1}], 0x8, 0x120, &(0x7f0000005900)={r6, r7+30000000}) getsockname$packet(r1, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000005980)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000005a80)={@dev, @empty, 0x0}, &(0x7f0000005ac0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000005e40)={@dev, @multicast1, 0x0}, &(0x7f0000005e80)=0xc) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000006180)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x43000004}, 0xc, &(0x7f0000006140)={&(0x7f0000005ec0)={0x270, r3, 0xa24, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x254, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa000000000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x72}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 13:27:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 13:27:01 executing program 2: r0 = accept$inet(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, @loopback}, &(0x7f0000000300)=0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x478, 0x140, 0x140, 0x140, 0x390, 0x390, 0x390, 0x4, &(0x7f00000000c0), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1f}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0x0, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff]}, 0xffffffffffffffca, 0x20, 0x2, 0x7, 0x2, 0x100000000, 'veth1\x00', 'bond0\x00', {0x4bafc5fd097945ee}, {0xff}, 0x0, 0x24}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast=0xffffffff, 0x2, 0x1}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x7fffffff, 0x2}}}, {{@arp={@multicast2=0xe0000002, @empty, 0x0, 0x0, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff]}, 0x80, 0x401, 0x400, 0x10001, 0xc000000000000, 0x9, 'irlan0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x20}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x78e96695, 'syz1\x00', 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) socket$inet(0x2, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x408000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x0, 0x7ff, 0x8, 0x8a29, 0x43, 0x80000000}) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) r2 = getpgid(0xffffffffffffffff) getpriority(0x1, r2) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 13:27:01 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x225, @tick=0x100000000, 0x5, {0x7, 0x260}, 0x6, 0x1, 0x364}) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) fdatasync(r0) [ 541.920625] binder: undelivered transaction 436, put_user failed [ 541.932313] FAULT_INJECTION: forcing a failure. [ 541.932313] name failslab, interval 1, probability 0, space 0, times 0 [ 541.932444] binder: 3229:3235 ioctl c0306201 200000c0 returned -14 [ 541.943811] CPU: 0 PID: 3265 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 541.957231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.966596] Call Trace: [ 541.969202] dump_stack+0x1c9/0x2b4 [ 541.972848] ? dump_stack_print_info.cold.2+0x52/0x52 [ 541.978046] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 541.982905] should_fail.cold.4+0xa/0x1a [ 541.986974] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 541.992092] ? kasan_kmalloc+0xc4/0xe0 [ 541.993592] binder: BINDER_SET_CONTEXT_MGR already set [ 541.995996] ? kasan_slab_alloc+0x12/0x20 [ 541.996013] ? kmem_cache_alloc+0x12e/0x760 [ 541.996031] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 541.996049] ? kvm_mmu_load+0x21/0x10e0 [ 541.996065] ? vcpu_enter_guest+0x3aa6/0x6090 [ 541.996080] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 541.996099] ? graph_lock+0x170/0x170 [ 541.996119] ? do_syscall_64+0x1b9/0x820 [ 542.019486] binder: 3229:3235 ioctl 40046207 0 returned -16 [ 542.023226] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.023253] ? find_held_lock+0x36/0x1c0 [ 542.023279] ? __lock_is_held+0xb5/0x140 [ 542.023308] ? check_same_owner+0x340/0x340 [ 542.023326] ? rcu_note_context_switch+0x730/0x730 [ 542.023347] __should_failslab+0x124/0x180 [ 542.036713] binder: 3229:3235 ERROR: BC_REGISTER_LOOPER called without request [ 542.041943] should_failslab+0x9/0x14 [ 542.041961] kmem_cache_alloc+0x2af/0x760 [ 542.041983] ? alloc_pages_current+0x114/0x210 [ 542.042002] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 542.042022] mmu_topup_memory_caches+0x2fa/0x3a0 [ 542.042040] ? kvm_apic_has_interrupt+0xe9/0x230 [ 542.042062] kvm_mmu_load+0x21/0x10e0 [ 542.042079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.042107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.118154] vcpu_enter_guest+0x3aa6/0x6090 [ 542.122490] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 542.126746] ? kvm_set_msr_common+0x26a0/0x26a0 [ 542.127671] binder: undelivered TRANSACTION_COMPLETE [ 542.131423] ? zap_class+0x740/0x740 [ 542.131445] ? perf_trace_lock+0x920/0x920 [ 542.131464] ? __lock_acquire+0x7fc/0x5020 [ 542.131483] ? vmx_vcpu_reset+0x1040/0x1040 [ 542.131499] ? graph_lock+0x170/0x170 [ 542.131531] ? __lock_is_held+0xb5/0x140 [ 542.131550] ? lock_acquire+0x1e4/0x540 [ 542.131567] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 542.170121] ? lock_release+0xa30/0xa30 [ 542.174084] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 542.179440] ? kvm_arch_dev_ioctl+0x610/0x610 [ 542.183922] ? preempt_notifier_dec+0x20/0x20 [ 542.188423] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 542.193254] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 542.198276] kvm_vcpu_ioctl+0x7b8/0x1300 [ 542.202329] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 542.208042] ? find_held_lock+0x36/0x1c0 [ 542.212104] ? lock_downgrade+0x8f0/0x8f0 [ 542.216242] ? rcu_is_watching+0x8c/0x150 [ 542.220376] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 542.224779] ? __fget+0x414/0x670 [ 542.228241] ? match_held_lock+0x821/0x8d0 [ 542.232468] ? expand_files.part.8+0x9c0/0x9c0 [ 542.237048] ? kasan_check_write+0x14/0x20 [ 542.241280] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 542.246205] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 542.251914] do_vfs_ioctl+0x1de/0x1720 [ 542.255795] ? ioctl_preallocate+0x300/0x300 [ 542.260190] ? __fget_light+0x2f7/0x440 [ 542.264154] ? fget_raw+0x20/0x20 [ 542.267597] ? __sb_end_write+0xac/0xe0 [ 542.271570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.277097] ? fput+0x130/0x1a0 [ 542.280370] ? ksys_write+0x1ae/0x260 [ 542.284165] ? security_file_ioctl+0x94/0xc0 [ 542.288563] ksys_ioctl+0xa9/0xd0 [ 542.292017] __x64_sys_ioctl+0x73/0xb0 [ 542.295896] do_syscall_64+0x1b9/0x820 [ 542.299767] ? finish_task_switch+0x1d2/0x850 [ 542.304251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 542.309171] ? syscall_return_slowpath+0x31d/0x5e0 [ 542.314111] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 542.319467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.324303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.329477] RIP: 0033:0x455b29 [ 542.332646] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.351932] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.359636] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 542.366891] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 542.374148] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 542.381411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 542.388665] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000057 [ 542.412734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 542.475444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 13:27:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xb7e751fd3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x4c000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000140)="295ee1311f16f477671070") ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f000084dfff)) getsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000000180)=""/235, &(0x7f0000000080)=0xeb) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0xfff, 0x8000, 0x2, 0x40, 0x9, 0x6}) 13:27:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d02, 0x8]}) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000003f80)={@rand_addr, @local, 0x0}, &(0x7f0000003fc0)=0xc) sendmmsg(r3, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="c5d52840ec1249a33f84cf90e485c900e6fac703", 0x14}, {&(0x7f0000000140)="15df8ac5eed50e1887886ea47a4bf8bfee7433080ec9a0", 0x17}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="a8eaff77da88217b2adece92bd1e8aaf2294ee87ee8a37c721c258b8f13bcdf0c599714c0cad254dd9e9b06c7f220d6803f66e638620b9fb01841a3b86589926d93f21c8ce9a7f73e51d4fcbb7d93c193ed9d7f3c9de7d7d4468601269", 0x5d}, {&(0x7f00000012c0)="a1ca75c337c8d201f9e15f8772acb5154769a8606cf4ee55a108f4d181d5f78208314d5b2445895837e81d7c993afa7911f42a5e5f1b867f9c342211b3f1f0cd368d83af42de09ab751cb91845c8a0947f7839c0d5392132509f6ef8a09dc035554ae24a698ee90156553718ea7583f8947ab057d6a0100372c255040c880dce45387f72279e47eee98ea5cfc49014dec28f0c9d9ebceeb2a5681bcf7b5ff61194fda49c4a8fcbb2a6629d5a7cfe34cefc76ce132a7cf082924f6868d2591d3234d4e996d11daaf61cd3e9377e625ddcda6c26fc99ccb0560890b03e28c1c041432f91c11c3d92823ac08e3c156190db6f25ab", 0xf3}], 0x5, &(0x7f0000001440)=[{0xe8, 0x29, 0x100, "c6ff4a809a6132749ca7cfd3219a93f16dac04df923add27a6f711ff19fb1abbc3c4cb9247fda8a8dfc2ec5ab2bc58bec36c7fa68970d2f6500eb6de3761e96eba0c92ed28eee3a35248c89fb8fe19a073ee13b0dbe8b1a15b9a8a7b14de16c576d8afd657c41f8aff0eb0bff64c9832dba25f9ac98e38d8a7e67fa4fbc6410c611ab9d136f315134a28a8f2d8e95229e6e182a348c5ddb88d09076490e38fc9e8da1629114503b90347a9fea613681bf1e2e3cd2212b7712973bb0e276a595edec94f31fc0ad7df27ee1acc76548f21835847"}, {0xd8, 0x102, 0x6de, "2736026df3b1855fbe3d51c4417f4f2cef1aea21439b3672d1253859b8e6f9beee845a24238d32964c66e9c4c0d59d43d8f55bedd16e2598f9965e0087c55d6784b6071d50eb3f5f2b018fa87e7e3b0882bfb9332f1868b6a3a963dd27e00b557e98028e487524f045dc6d5d8295109d02ac93e485b6076c61e8baa9db08eaf1ba6be8b24b78adeaab83bb21fc28c9f35d2f1e381cca4619c192f4e03194edcea06328fd84df53e66fc1c46318dff63f53008b7819ecbc72b2486c395ce3c8b788b76a"}], 0x1c0, 0x8000}, 0x7}, {{&(0x7f0000001600)=@ax25={0x3, {"770f41229aec62"}, 0x1}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="c028dae4c975103ac8505e8e8c3e9cd2cb356a80c33e37d18ea93fac9fb549023040dcb54d4b9c20afe3d1b7d4eb9193e6c0c1842cfdb91abc8041983f31cdfcc22fdd929918af43dce074fc4e11d4f0edd0056f3ce616679f8ec29cbd041f2757225e58e273f20239c12ea8bf8e26379747b7109cb1e0478e67bb077e70a892129179c3b35491", 0x87}, {&(0x7f0000002740)="066d4312e8f4edd2541ade28c2e2cab8a7e21769e753358e6ce8fdae88b881b50ed595ab0a6ac69156af31fea617925fadcfd7dee34a3ab936f1d8d371235752dafc52b2117ae0cec9e3a2e1271cb17b1fac94312ea721984056042c1119bcffa17ebbc7d3e1186fb4da79149576759f9749d428736114d126379c940362877890076ea402f2a2473eb62b602b2d75007dd1f38cf3cdd9852067d0f42bafb0b3832a4e09b0dcf47dd3ea36ee", 0xac}, {&(0x7f0000000180)="9972eec0becbc0781b9a0ca8e785c3203fd671d7620c85c0b7d8040de102ada0f0aaec7c2750a7913da1e0eb028a8be8710f", 0x32}], 0x4, &(0x7f0000002840)=[{0xf0, 0xff, 0x3, "ff9b65fbe7a56cc62e7d4c737a931cc568bcbee50aa26b2f3317c39b12aef378baa7b777760aa5875bbc2ef0bad571d1676c9f137476acdc9472d52d55b45fae83f3fa5673bec09c25abc6b5508f9ef2712090e87462511fd56ed582f90fb0930bc413d2dd85a93c101400ce93b4a9914c532ec39ee1cbba3aa2113dcad391fb9b39296f66fd90e93e94ece79d2bd65e05f338b4395a0680a4daa10b53cc2081fb44c3930a7085ae2fa4aa3608a431fd11613e48ee04ec9afdb13e9bfb9f43fedde780c46e68682fe78da0d43def3be28ec99e88e481fe8fbd78de553f738265"}, {0x20, 0x112, 0x1, "81dfb3e9d75712e86840087a09"}, {0x30, 0x11c, 0xf1, "4fd97616f10f7ceaec2dd42c9cbb14deb95c41b2c01132333b17"}, {0x1010, 0x11b, 0x2ac, "8c916aeb9357eb07f39830ad1cc0c045aeb87dd33ea2371369e1b39a2d50b30d422176f53318a2677f2a4be35dfd08a03aa352671e502f69cf907e01e71372d263e79c19c0d84ac9bc240402d322ad93d1542e1ee76b80f835a18ed79faab3d1408454bade7d3b923cf4a85b7e3d4d5cd5041d8598610832e463ef145b4245a4f4f31f9b166d06c238c0aa8479ffec4612242e12b9679b981dc8a5d3d7db52a36f0ff6a48066ec242f03c9a50f8818685078043e3e202d5527031e8caf7b77101769fa9598c2aa9f7915425b55c096de49028588e8e612fc07fc33c7ff7edadd55daf1730ffa449de227f3e58c50d5221cc45e362e039e7728012adbab3fdc239c0ce261adec3daf473022b7ec8ad8d0433a315a9680d412579a296d4ffcabc2d039a0eee36b7998bb762d5da9a6d7940cdd8671ddd8856995fd76bf5ef019cd08f7613872c1bc5f9de75319139606eb8d0b9f148fcb7ed2247953f4bca9947efa3df342925d185c8ca877bc2d54096154337eab2e9d3dd7b7e7ba5eac0edc3fcef59406fafab228085238710d6af3d8b0b906f1799b1742d24cc078172ea87d926653f1b19b3255d2c0dae29dab6d4e3fa839650a7df7d662c4f0b0433b5f766d43b1b9789926adfa01a429e07c9cf80b5b2d8ea0084758cf1dc07964f9f193f0aa40cd76ecd2adfab93bcec29ec1d8ba3c5ab5e17863748470c7c7237b8cb7b0e663e71aaf012e34a1e07f1a1fc142bbaa2c1404dec15100013ea397a073af2855229a9b9ffadd79441487e05b5c5904939518093245f0aeac85a94796d3abc0a8989a509635c61b550fa9f29a0862902acedc9fbefd67c09dfbd9e302d7937cf7f7336b7bd2716a55266fb57cee4237781131e4c971823e4042a40ce1614b82cb29b1c3d104bd0203cb185bb5ae16e2215db3562a6482b886532084803d57c04dd2c7cac365d467d64e949bc5c17ad1c1843b5d319467f761987a8c507cadd2946317e3451033cb0b206eee9097357a8bc9491a81cb0b10e915006b262191eb2af743fba6ca801979a23a79504004b81ebdfa351285f0769f8c13aa154230e8b0e0db1cce9c93784d15d7503be3dc2fb524a10848042931532e90fa922fd9abb540c5d6ae7e3a66435d93642e7fbdb1aedd0a80ae9b02daac0b1305ba38b234f506a4124ecf2818a19111f91db9f0701fdec69def0e5ec74531bbe8cfbda56f738b7bc9dd6e4498e355e863bbd31acdad528db33f8e290c94c3756b603fbf7bd867f49c5e612cf86b9dec4ae3756e28083d0689493a99ba79c229097582b70e445ad075138901690c9f67b68b6bca625f6162924895894dbacb0b3d2f44bcb8c4041799758e21106e1dc5ce96b2d0e1503f92b4211dc71a8669cc7ccad0662a0f91c344cda9d45e495b236a5efed14af21c70de13e99dccdaf2ba6822ced36a0c106e96676757b050822abe176482d92116eb5813a4fe5768fe5912afb2511fe06e9d3a2ef5fe2ad67c0e0c978b3b34d843e0ce1e074d5827bcc18d55c26f68f27c54f7525b95bb167bceb2c693f2ee8fabe71d76c25398e068b58d85d46ad6d307f9769f1e43ffa7c54cdaaa11784f9b87905a8a2e6e46d786ec88d76afc70f047ed2cae1d076e211ba4d1c8ba435210f07027e24e10d87e14e5821e8f3616c1a38d9dbf0f56efc923b5c311d813e1dc21fa8f727a4a9f65e583698e1fe7c15a92ccdd64ba00df742980882c717b34caf6e9e00af7cc61521329a630e2349c0a020363b8de20cbe59ec5812be1b28888c3e8eda94f625ab269e0a4a7b6bf1e1db9e63443e850741b6e8d7f2a9ca095ef476da02acf5eb948ca0f7b3ac536163d39fa306846700a78d7ede9aae42ddce82a891e063906e840d7e8342e2876652c1b3f86989e20c6fa613612cd5a7a8d25edb1667c42d135482925e4f4f67ba3cf6ac7b5b9093ba1aeb7b9f170610420fb750f417ac84f962d38c0de0983bc2e90615d3ed8c595b1a36bea1a07951baa4dfbc89cc8b0f7b47935205f0a7aee3859b503bef60a67b16a900e023c0fff55f588407dac1dd79c20840c8480b747866d58ebd7fdb7132df44d493e3da9ec9413e7450c6c8dc795a2ea94e0c7ebed539bbf93474236ef37ff3f5e0d1b9e0b3dd9118b4c9d5298998d0fa83a04e2eff6e25838fb77abb96ffa19206b0f72181e807f4b2fcacd350b3f26abbdc3e655659906e0e22f4bdfcdd60d99a52d0ba68755cfed1b4e3061f6734553b7b9110f3c6dac6f56c8da984f4363414733ff7369829dfa5370366bfab9b5ca58e0a0c5879e948319ced4f322b773e83d4876d09dbabac3db5ab861a39f07ca68a3c181e58e98af3e3779f226133c44576944b89571702f7c46261dbd6e64f840dc77fd0e26a2f21af85d6c0e2f48e7e6f2fd687de340d379814aa3471a1f1d94d7a6e5d35deefedf9bef1d7f616d5eb695f907e30dfdb375066bfdeab4e0d521a83919dddc0114f42a73fbe8b047bb5c9a0b3efe430ce67596520e6e4ce4c17d9c52b5cce067ae4b5cf44162bd42d2ba1317c3cc18dce7aa75c24a1e557d83ae8af73372b14d5db0e9cbadaa34c0afd72f3e1b1f5b82e7ead9fcad32e100b4ca8862a7b0895832a6fa6efb479538c77e996c999800559a18a62b354ab92308e9fdf21e902368d13e3bc0aa87694734f5f58035b4ce0b35aee92d8d3bedc7ef22027f8c0dd6b5eb2b21cac2d97a8df1744dd09e6a1018b7b6773d6133fdfc707280e0aae4b0b1f7c81a66ed181fa476c69a570423fbd7096f5dca93b537552cdcdd6ea138e7abf68c82bdeb52fed3108df6dcc6e0486c3078a8eb864ab7214c6839522797446b3b8c3b9c1da0559ffbddb6c4e367d8a49edca42228751dd1a6c6d7894497b346cbdc80fd0378fe5be7fd8c9ba7ab5421e45a68349062e6c9c753715a9e302403b4e46189ef3e6b9ebcc057778c475af759c93db0604f94c9a176c31c91b7deeec92920c933ac713f0dd069939f81c115a5d0f8920889563d73cb6089637bf0385111c35f9a2f64d98f175c16109f0f6f989c0b71cbe9ae1404f8dc4ae6cfbbaeee65fac8fb6449866c1c2ea907e2dcc4d1395c83c1361ece45ab855d0d0c167f6e7f91108da5973f44a472f34a2c81ab0467fe8661a6ceeafd57675fdea3b87ef0d74450ec4a281f937452ad0c5bf2aa865045e4608b5ac93cb44f78c25579f8aa67f29b119a86fc79b6acf1e7990873e881b2595a8b044edfd854b4d20909cabf973a113058bd04b798c33f0628d886bf4d2724441e981bf0bfa4716f059a52017f4a86b4f1d0457f5c4c783eac2ed879bb505e73a31f41bf65f9705468496eeb843d3998109650263c82021ad5c4c464607c2f37809133bda9221f5f80e8706002c43af4c5cc29f887e324557b58d7e2c7d30e7eefade7871a0e9089c2ec6c1f8167b81b00aa5dec3436f76a4151a299c861a7fbdc64fd51f47fd659903b0e6bcba858ca576fe54dde171ef50d62b19815aac65a46c89f29429691836d9553e94028a80dcbed03dff2d89d14adaeed2cd904d18cda11174296f4dfbbe211ddd6a81b08bddb184b3d8a85ede2d26d30ae22a454ce0f97f76ff99657d6984aff3b02e89f7279307b147a2f59d7cee1123a1d61cdc667ade9e095076477eed3ce13420a137643f1a9a9e69b6a52b771cacba96bd1d06b131cadb9ae731083186964b4576dfec9431b1e7629ddd82c0de84b8fa665afb6e13d16fdc5c699ce1b8fa1e55d80a836dc79314945cacab4a2cccac936549ddb8e937d69e182557a7e0dbc4450c34dea8e69a7df919bd8e3b946365d32c708b0c94bd4b050c8af48301bccba9195546d1c72cdba871f571ba6e0df635eb0e12194e3b1ae677b9ae546b3c25b7545f6be1f58b68558a73092dc2df0f5b1f391bbe0f1fbbb3dbe6cd05c9c5227a2ff36d5607e34713ffbc297a7e216332bdd3edcaa5ef7c3e793faf852dcb03f3332f9654fdb9ce1ece18358434f6739894a4540632dd27bda0efc8f4cd2ea7e6d4e18ef87415e334313c06a985a1f59276b9fd00d2e5df85e5dbfccaf1c31be447d6c57688cd25aab960c18f600eb170eb1f9031722f3722afce6e1f7cc7f86a0d6bd6cba99d5da3dcbee7255dbddc809a29e4151cc38d5bbb4cf6406a44c154fea466d200ef0c9e2202e8352f8c80ca3c4676c2b4ecea14fe6032152a4ca7396cbd89f01f08756b26b9d730d957b49eac915e5a0d91befd9e7a03f8b07e2a39e5276ad4b8d6a95d2bdf6f3bd297a966af334a4a6a772c515e2691cfffcaf57adcdf43c19cc2531b2a700be72f564b4ce9edc9ad2b273b447998cfda612adbf8bf634aec2f73c0fe2dda15ca9eaf15b068d78c204781e32736f4f19ac2d908fe1961532434220aa18eebbaa7d79acef50fa282a07cad75313fef6d1476f023b62e546b81c4ab8e2e640302dfd5e3fd612138c034fd78669b1812e57173203d4b6802b2a7e2b9d23cb01cac8f431e9e154673e6b569b2fdd3fb5b9c240691ee7db80e690eafab2d4400d6c412ed24db7e72056598acdc79e3df2a346edb7ad207aa18daa8849c4f87e2813110a9e3470d94581badc18ed4d1c4c39b903ae7ad9c99200f25fd22261b9a49b420c56d019f83c2e0441c8f64c1728377501796ecb5ab7dec20d4d860460edc623623559e11fb67dbe87ed7d76fa62f030da3fb0f649230bf80da06cfbd39fb432dd85760b6f6c18c99174a6a48a7cc3e70f6c4666a0fc4c981abbfe77daa3022c469c2241837352f5243efd5d6985bf1747d0a04fee86cf89a93c3b174ed5969eb45ea22e18a1c1f016130ea076e0398209ad9e72080b78dcdfebb8724a35da72a77e6c8c1ffcc08e5851a77731c791179adeb057306d56c6adb4cf73f1ff1f521c60c345527a50f3be48f31132ffda1b5e609092355378bee65c2772344a0a9a47d8cebbd273a5a4cd7bbceef565090bdd8924d54796b23c54b2f22b190abe8e94e076847c68d351be97a7dd168909a2e6586c20033eaa4e133191d86c46ab896eca86118fc1230910dcefd6ea640f19c72ca8f0adf8567eae0f4330e197d5fdc656889ac05f09acd1288f46e273de4039c029155ee51a6356fb0a7861817080118a03b05ad4a0f33f8c81145944c00128f6f4cf0e77af6bc24a70b0056943310cac846fedcb21a23b1cf083b0dad23db0621d2d254d4f84e85222f07d173de36cfb09a40081ce7d54fd1e2ce29a4e869f370d4d23342f04d178fcc066ec720f9147cd005159975d908508e271e8d167c11f9b252a99326d3e762bd952622cd77a9e36a3a5c156c8956cc6d9f463a121cc4aad843bfd9e23d06a9e87f0bf2dfe3cc76b793c850208d8839031e0d2ccfff8b3c8520463f8be4c716ce8eb83ca3875341053405a98341cdbd0cfcb108d98401bea01b21c6bac53d5d56dfefe7519b7fb9d81362eb333969c5c5f7c1a50d9ab402f522dc051687ef48a49eb7eb5ea970ada21518cea5b2c4d4721a198f771fa7f555d673997ae41c590e2021f67223681d713868c35375840c16b12f59a1d71bda3cd93f9c32e42a818c322650db0c3276e8d9a3e16e0f88ef6ad6c40fe4d50b262a9a14d19e8385374f9cfe4c69522c17991c1752a5443cfd665452503b9e03296bc8621e24099cc9c56b7088686c6634eb3c6ec8a48804c16a1ba8ce5368518103eaf1e9e35b34edf110eced549a039d6cc81fc8cf67577e1cf4e82d7c8dded1f9be6924bb0bda7f681310025e95fbbf81bcc5557b7063f829ee7c59f"}, {0x90, 0x0, 0x8, "91444d0519d5aad4710fd6bd7457c139270fc3cad2080953a3dcd0e418e86b07e589c7756a3ba9e5ba22c5acba00120f0026d1a1d2f4209c43032ade5ffbdbfe8dbd25b3684c22653b8190e51f8b42a78b309b7b4712392f4fdf71850cdc0ae3469b70a202e8f26073fa57632c9ca59557d2effb3601a54671ec3ccc73b4"}, {0x78, 0x11f, 0x0, "bd7e41405874ba67ce3d90e5ee8b1691880871e1ed9eb37fdbcf8957106564a18388a8c41e5d894f4d31894537e8e49173001571729ba33c94b8f76f51328ebc11c07d9bf233d27ac1ab5c547480ae87f901b0015e6e713848bcc092680fabed70f47e"}], 0x1258, 0x4040080}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)="952d3119d501149c19c6cea96c07fc81aeeb571d4268baf7771e1e9312bb127b91a3c696b48a0006461a0f560d691bf1438b76baa748373ba2988275ca0fb3bf5e806c0ebd249c2c96d053566b38f82ff8d95d8df1c3f5e46380268242018b37967c609e9a79bd2bf02bed60a7b3bf0fa17fa2fbedbd53c29ea1a34c84247e042389e21bda79eceb3d504b0e8d595e10cdba2224a8f0254fbc8e2db1caf615f0821e059c69eea5b31c6f632a17143ea8392d601f92d069a7c8cd0832347d4bd607c7", 0xc2}], 0x1, &(0x7f0000003c00)=[{0x40, 0x119, 0x7, "b117f569019150a9d5b644c00494385e5fd965d346a8cb4aa571f27736fa3f486f2c04442d44d77d6dbf7a"}, {0xe8, 0x115, 0x0, "1c4171f0882e4a56aea6103e4843e244d2d361e74b2231d70d588aa53234fdca682c113e0498b0f5eb140e4709f1098596e53761c9e33339aa3c9fb5cbaeeb81f7eca86d209a5d919d411f666ac59e030bf682c3c5c49c9799fd245176c03c2762a6c66eca567257e3f79ac3c45fa6402a71a28310cfcdfcd179901fc6f52a4718652867397cc166500785368d054a5b83eecf9a882e407b296e88355c9d8be0d68df5128b8b3d1f12d05639bd7bb2ba80e37c27d402fbe1e836f41e22efd59e02217bc3c91bc2256c5fd122e12ed9b770"}, {0xf8, 0x101, 0x3, "e05384d16c09e97f8796c61c136752b6a0a032da8ead7608da8b5f7d8dc78248ba5019a3f8ad20a607c5d0dfd73c29f01c57f61c14f71f4dcbb7277112dbcaafbc81b1e3e61ed98acbd1397db0eee9cdd526986607788b148966b3854637eeecc50fa5776342cd52a6c9c9d88e20aa9fba9091007474ea61ef105429953eb55241e2fc98f6b7d90d0b1fdc8c934504a0f9a50061185a69ca61bde6e87406699e0a165567253cf5b471a8c92bde23093b948163516be4ee609d6409d2fe36305fba44950e715819a78afb30598296e66266b82d35fa19d19a82da760cb1c062145b8dcf3a"}, {0x100, 0x1, 0x9, "5c899cf604c0a291d18bc0753d626bbe0fa991ddd6466b10f591ea705e95d5f604287d43f1213ef391b1daa5d653554ac53248cc902251df2a1764ae8da8cfe0b8df9686638a4703173ff110ae8d9de80971a63cf35ebd91616ad18b05c086c784077cc6b1eab37537c8ae4110913d12e84c48a73bfade0ed2c230857bdde97f85805e19ca54d3bc3ac03b11203b647ef6953d77791a39d290b65b52773e9f7f44e5c5918925deddc88b3bf456410e63a19e8f452cdafd2b80867b08655596de601b77e613085fedbb222d163b8cfd65895fa9f060304ed363d196cdbdff67649c7850c6250933127d4f9c6b50c0cdf0"}, {0x60, 0x10e, 0x6c3c65c0, "30e86395b7fcd71fed757b05c1f77db177e5fcc1d619bbbdfaeae9a936b427afba23d10f162fc86bdb91c693e36085f98dd6502073b1b29f8ead1eca1ea7ed306191745c958882890bd50b600e"}], 0x380, 0x24000005}, 0x7580000000000}, {{&(0x7f0000004000)=@can={0x1d, r4}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004080)="e7d04b8257bc5fb64f44072da5a5649fece9da15888c85db9dbce5f96bb102ce3aae336d4c80dde1c700e20012a0a8e7b2946d952f31f1dd811279e9517b4af4a146426c0cfdb652570c2dd4f2fd4d6f74b5de93e175b6940fe1bcea9ccecc4de0878c8a6ba1bb0dc9", 0x69}, {&(0x7f0000004100)="131a1e10291a398260a4c3bec5c0a622e694a619eeb932c2bd00ebeb8b5abb47dc5412f4bb8eafb33e91c4c6272055ef35a5efcc34c2132c8712b270ba339f47dc560805fd6a9a1f0f66cfd70ad4183181b859026fd1735d794deae03b6e5cb6520f6d3682d969e0d489c6ef64a181633c1351d670f01652c4e725605aaf3ba38380003a65e5d9754ae43171c6aff8174588606ce647181089322d06ed563cc0e6a8bb4968acd8f18976e96e395b26985d776bd8ad6b7d0c2bf5b3a4e9892a64b5da239098549d397a7164bfcef2758e80e91c124f23a6f32b27919bc36986d3", 0xe0}, {&(0x7f0000004200)="d582c6bb5231f6e243c56493679e6be6db4a9617afafbca2b337e71a8abfa56a224e2b66aadc5f47a661f61fe932449211b34da09354bb323579191738e5c166d98bde7f4358a19ac876267fb1fd5640f6b18401ba89b06a114a413086ab8514050a441bd51b8b74ced59dd06e2c4442df68afeecacb6de2caa06ed8911799e555d15235f67d918cca397ca6be1c83432b014135b6e24a31e686876deeb14c9fa909d3481003c83fede758d861b3887f", 0xb0}, {&(0x7f00000042c0)="5421a3d360338d6826ee5eb23a1797779baeb2f3a14fc61067724fc99636c82efa1b4b679fa7400715268b8729d2d400602ff589e13755c138750cbb0867a312654efcef9960789d7a83cc3fdf433e86541941c82b9f297679ed7a3789219c3e6a9606d589b341f914a99b9543114b7a367ff1c53749278ed4a400832a566cf089d9991829df248728f601ea45e53af865e20d2984ed2413fa2c9121363cb0ce2c25c2b0649e501bce33ad85f0538d652539df4e6b2621a65923ec714854e152ebcca760862c2fdc9e94b0824762520982e9702b6f31", 0xd6}], 0x4, &(0x7f0000004400)=[{0xa0, 0x116, 0x9, "85f8b47d7d78559337ee9b719638e68ff0e9f4730ef70ea6dc5c24563b6cddcbe77498157bafa71bf81f3d0990854041ef40b23a2f0b983c3e20df6b931a06480f0c2c408b30017ec328a1d9036d4a0763fb20f16697a4a9978ac89b7ba845f17681b9700698af7173188f3b08a108f83ec447d3cad23f4c739b12c73faf25cd6d29cafb58a617cdb5ae60"}, {0x60, 0x112, 0x8, "72217b553a41f80caee9f8e5b48b1cbaeaed1018ff08b65d4ee705442712148a8d9ff37a9e8581d361f78a1c0cd539501589e77c81ff91d20cbf76897f56b892a763b5af36d1196ccb9d237c"}, {0xa8, 0x0, 0x8000, "db6aa30cb895a807a72c8e26fc88c6f41558159fa9163e2c5ea5aabaa698fbbcde86caddc3cedd994f46f39ed5453544db6747bce84a7a9a5f8558383e2d88e2385c45b0f9a102000ce4504d788924637fe9f9342e0bbaad9504cf7a70cd56bac5c1656d3c3f8d9db80bc4aca83de0abe50504ae80be464651d8ec1e119848d66844857c8d027949f85deef087d227a10f7e"}, {0x38, 0x114, 0x0, "d52a5fb64bd37f61ca1ac1680d891c7f4496a873652037aa28378c7a37a2e1c26bcbe0af4927"}], 0x1e0}, 0xb9}, {{&(0x7f0000004600)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x5, 0x5000000000, "0d8f55e06bd4a1785e4acb152ab745d4a36e9b20e517ad33adc2680de9485a2ce551aed2e6ccb4b71dfe730bda4f517b82b73fc21a82b8a5e738b931f98e54", 0x3b}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004680)="ca259768cc6df5c898e5c0802cb25b2b9ed03619ae307da102892d3cc0efe1280c6bc5d2f27b1e9f372ade369430906a4602f9c404f0f235f40a1a306158e496d851421dec949f6ab2b95448e693fb6ebc9f11d4225164029a8fc4a80509e8a610313295be20e56a4e4d5386fa6e374e8a91694465ff5be0aca1554ac3e7d1b2be5948", 0x83}], 0x1, 0x0, 0x0, 0x20040800}, 0x2}], 0x5, 0x44090) 13:27:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000002c0)={0xb25, 0x1ff, 0x9, 0x6fae}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0xffffffffffffffff, 0x8001, 0x2, 0x81, 0xfb, 0x3ff, 0xbe, 0x3f, 0x7f, 0x7, 0x5, 0xffff, 0x8, 0x8, 0x81]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x8}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x9d, "d0470baba27df6c9298170a7ad2e021d45f4c7c38e77c46b897d8c49c794172dcb8b477ab4f88ad76e8a192799ac87efffad7a0821eb2104109f00e56b92bf78d5e9a5928b71da6a45e61a7b55c8e26e57a85fd300b872ce8cf67431b640c8031754865b3833e8020811266d72823efe63cfcde7c303b91abe908099ac418112db188000ee7eaf5014bc4e5857f96e5274a993729ad0648919ab6123eb"}, &(0x7f00000005c0)=0xa5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r3, 0xffffffffffffffec, "f71fb510be56331a4ac9b19aa0b7b70a44eadc8948d9208c3733232d62eba16ead652dbe7d88648ec099c7aca553c28d63c720a0f21e7b00a210ffd5b1eb221644390ea6be18418abe68b208f650a13888e560119476c2e706c3000000000000000000"}, &(0x7f0000000100)=0x6b) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0xfffffffffffffffd, @local={0xfe, 0x80, [], 0xaa}, 0x9}}}, 0x84) socket$inet(0x2, 0x20000000000, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x5, 0x200, 0x1}], {0x8100, 0x2, 0x80}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000dbcff9)='ns/pid\x00') ioctl$VT_RELDISP(r1, 0xb702) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={r1, 0x1, 0x1, 0xb82d, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}, 0xd9) 13:27:02 executing program 4 (fault-call:7 fault-nth:88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949e", 0xf, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 542.795631] binder: 3295:3296 ERROR: BC_REGISTER_LOOPER called without request 13:27:02 executing program 1: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ef) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80002, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0xcaba, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4a0000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x4ee2, 0xed06, 0x4feb, 0x7fffffff, 0x1f, r1}) ptrace$setopts(0x4206, r1, 0x1, 0x0) [ 542.873560] FAULT_INJECTION: forcing a failure. [ 542.873560] name failslab, interval 1, probability 0, space 0, times 0 [ 542.885103] CPU: 0 PID: 3305 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 542.892217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.901673] Call Trace: [ 542.904296] dump_stack+0x1c9/0x2b4 [ 542.907954] ? dump_stack_print_info.cold.2+0x52/0x52 [ 542.913176] should_fail.cold.4+0xa/0x1a [ 542.917279] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 542.922373] ? kasan_kmalloc+0xc4/0xe0 [ 542.926253] ? kasan_slab_alloc+0x12/0x20 [ 542.930386] ? kmem_cache_alloc+0x12e/0x760 [ 542.934696] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 542.939627] ? kvm_mmu_load+0x21/0x10e0 [ 542.943592] ? vcpu_enter_guest+0x3aa6/0x6090 [ 542.948081] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 542.953098] ? graph_lock+0x170/0x170 [ 542.956889] ? do_syscall_64+0x1b9/0x820 [ 542.960939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.966296] ? find_held_lock+0x36/0x1c0 [ 542.970348] ? __lock_is_held+0xb5/0x140 [ 542.974403] ? check_same_owner+0x340/0x340 [ 542.978714] ? rcu_note_context_switch+0x730/0x730 [ 542.983636] __should_failslab+0x124/0x180 [ 542.987861] should_failslab+0x9/0x14 [ 542.991647] kmem_cache_alloc+0x2af/0x760 [ 542.995806] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 543.000725] mmu_topup_memory_caches+0x2fa/0x3a0 [ 543.005555] ? kvm_apic_has_interrupt+0xe9/0x230 [ 543.010301] kvm_mmu_load+0x21/0x10e0 [ 543.014092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.019618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.025154] vcpu_enter_guest+0x3aa6/0x6090 [ 543.029473] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 543.033700] ? kvm_set_msr_common+0x26a0/0x26a0 [ 543.038358] ? zap_class+0x740/0x740 [ 543.042061] ? vmx_vcpu_load+0xadf/0xff0 [ 543.046116] ? __lock_acquire+0x7fc/0x5020 [ 543.050336] ? vmx_vcpu_reset+0x1040/0x1040 [ 543.054658] ? graph_lock+0x170/0x170 [ 543.058464] ? __lock_is_held+0xb5/0x140 [ 543.062513] ? lock_acquire+0x1e4/0x540 [ 543.066481] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 543.071486] ? lock_release+0xa30/0xa30 [ 543.075446] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 543.080728] ? kvm_arch_dev_ioctl+0x610/0x610 [ 543.085214] ? preempt_notifier_dec+0x20/0x20 [ 543.089704] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 543.094534] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 543.099546] kvm_vcpu_ioctl+0x7b8/0x1300 [ 543.103599] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 543.109310] ? find_held_lock+0x36/0x1c0 [ 543.113364] ? lock_downgrade+0x8f0/0x8f0 [ 543.117500] ? rcu_is_watching+0x8c/0x150 [ 543.121631] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 543.126038] ? __fget+0x414/0x670 [ 543.129483] ? match_held_lock+0x821/0x8d0 [ 543.133702] ? expand_files.part.8+0x9c0/0x9c0 [ 543.138271] ? kasan_check_write+0x14/0x20 [ 543.142497] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 543.147417] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 543.153124] do_vfs_ioctl+0x1de/0x1720 [ 543.157002] ? ioctl_preallocate+0x300/0x300 [ 543.161400] ? __fget_light+0x2f7/0x440 [ 543.165361] ? fget_raw+0x20/0x20 [ 543.168803] ? __sb_end_write+0xac/0xe0 [ 543.172859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.178384] ? fput+0x130/0x1a0 [ 543.181656] ? ksys_write+0x1ae/0x260 [ 543.185446] ? security_file_ioctl+0x94/0xc0 [ 543.189843] ksys_ioctl+0xa9/0xd0 [ 543.193294] __x64_sys_ioctl+0x73/0xb0 [ 543.197171] do_syscall_64+0x1b9/0x820 [ 543.201046] ? finish_task_switch+0x1d2/0x850 [ 543.205532] ? syscall_return_slowpath+0x5e0/0x5e0 [ 543.210469] ? syscall_return_slowpath+0x31d/0x5e0 [ 543.215390] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 543.220745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.225579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.230753] RIP: 0033:0x455b29 [ 543.233922] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.253683] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.261395] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 13:27:03 executing program 3: r0 = socket$inet6(0xa, 0x4000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7fff) 13:27:03 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x44080, 0x0) r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r1) [ 543.268647] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 543.275897] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 543.283159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 543.290420] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000058 13:27:03 executing program 4 (fault-call:7 fault-nth:89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:03 executing program 1: r0 = socket$inet6(0xa, 0x40002, 0xfffffffffffffffe) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000180)) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x9, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00001400000008003d2170475b556a9dd640fb6c57e54500001c0000000000119078ac146490ee22619ea2649477b16ed4e1f0f1368ef898f8e103b01948aff519d57e04cffca776ad4a3cad6fff6fa83ddb11e00fcb3b5e89b339299de6bb266ad00352"], 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) 13:27:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) 13:27:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fallocate(r0, 0x2a, 0x7fff, 0x6) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000080)="a6282ebe43446f05fa593fa6c0b8880a5823dd5a30f5d3d0fb4a29edc083f35ca5b6458e06930977615b21dc9b3054e349d3cec56f7f4631779e6d8be78d9aa843174cdb6c1bc2a360110f7751836872ad10e87786c76fb3698e9f0974b75bb3d1ddde319ab5fc9f7654a9cbae75f5ea7a2ad1017e7da3f98e52247460706330f3785424764cb875bb4156888e3695d9d37da80bb3c0") sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090a0000000800000000008000030006000000000002000000e0e72d0100000000000000000200010000000000000000681b000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7f, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000001c0)={0x3f, 0x28, [0x2, 0xfffffffffffffffd, 0x81, 0x7, 0x200, 0x2, 0xfff, 0x0, 0x1f, 0x6]}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000003300)=@generic, 0x80, &(0x7f0000003500), 0x0, &(0x7f0000003540)=""/122, 0x7a}}], 0x1, 0x0, &(0x7f0000003780)={0x77359400}) 13:27:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'gre0\x00', 0x4}, 0x18) r2 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r2, 0x0, 0x11) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x40001) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000000c0)={[0x1000, 0x4, 0x7004, 0x5000], 0x5, 0x80, 0x3}) [ 543.574162] FAULT_INJECTION: forcing a failure. [ 543.574162] name failslab, interval 1, probability 0, space 0, times 0 [ 543.585569] CPU: 0 PID: 3342 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 543.592514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.601882] Call Trace: [ 543.604495] dump_stack+0x1c9/0x2b4 [ 543.608231] ? dump_stack_print_info.cold.2+0x52/0x52 [ 543.613427] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 543.618276] should_fail.cold.4+0xa/0x1a [ 543.622339] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 543.627435] ? kasan_kmalloc+0xc4/0xe0 [ 543.631310] ? kasan_slab_alloc+0x12/0x20 [ 543.635443] ? kmem_cache_alloc+0x12e/0x760 [ 543.639756] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 543.644684] ? kvm_mmu_load+0x21/0x10e0 [ 543.648670] ? vcpu_enter_guest+0x3aa6/0x6090 [ 543.653149] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 543.658160] ? graph_lock+0x170/0x170 [ 543.661949] ? do_syscall_64+0x1b9/0x820 [ 543.665999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.671369] ? find_held_lock+0x36/0x1c0 [ 543.675425] ? __lock_is_held+0xb5/0x140 [ 543.679481] ? check_same_owner+0x340/0x340 [ 543.683817] ? rcu_note_context_switch+0x730/0x730 [ 543.688740] __should_failslab+0x124/0x180 [ 543.692972] should_failslab+0x9/0x14 [ 543.696761] kmem_cache_alloc+0x2af/0x760 [ 543.700897] ? alloc_pages_current+0x114/0x210 [ 543.705467] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 543.710385] mmu_topup_memory_caches+0x2fa/0x3a0 [ 543.715127] ? kvm_apic_has_interrupt+0xe9/0x230 [ 543.719874] kvm_mmu_load+0x21/0x10e0 [ 543.723663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.729199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.734744] vcpu_enter_guest+0x3aa6/0x6090 [ 543.739060] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 543.743300] ? kvm_set_msr_common+0x26a0/0x26a0 [ 543.747968] ? zap_class+0x740/0x740 [ 543.751673] ? perf_trace_lock+0x920/0x920 [ 543.755900] ? __lock_acquire+0x7fc/0x5020 [ 543.760131] ? vmx_vcpu_reset+0x1040/0x1040 [ 543.764438] ? graph_lock+0x170/0x170 [ 543.768236] ? __lock_is_held+0xb5/0x140 [ 543.772296] ? lock_acquire+0x1e4/0x540 [ 543.776270] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 543.781282] ? lock_release+0xa30/0xa30 [ 543.785242] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 543.790593] ? kvm_arch_dev_ioctl+0x610/0x610 [ 543.795084] ? preempt_notifier_dec+0x20/0x20 [ 543.799575] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 543.804403] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 543.809416] kvm_vcpu_ioctl+0x7b8/0x1300 [ 543.813467] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 543.819175] ? find_held_lock+0x36/0x1c0 [ 543.823250] ? lock_downgrade+0x8f0/0x8f0 [ 543.827388] ? rcu_is_watching+0x8c/0x150 [ 543.831529] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 543.835936] ? __fget+0x414/0x670 [ 543.839391] ? match_held_lock+0x821/0x8d0 [ 543.843631] ? expand_files.part.8+0x9c0/0x9c0 [ 543.848199] ? kasan_check_write+0x14/0x20 [ 543.852420] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 543.857354] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 543.863056] do_vfs_ioctl+0x1de/0x1720 [ 543.866937] ? ioctl_preallocate+0x300/0x300 [ 543.871340] ? __fget_light+0x2f7/0x440 [ 543.875309] ? fget_raw+0x20/0x20 [ 543.878751] ? __sb_end_write+0xac/0xe0 [ 543.882718] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.888258] ? fput+0x130/0x1a0 [ 543.891528] ? ksys_write+0x1ae/0x260 [ 543.895323] ? security_file_ioctl+0x94/0xc0 [ 543.899722] ksys_ioctl+0xa9/0xd0 [ 543.903168] __x64_sys_ioctl+0x73/0xb0 [ 543.907054] do_syscall_64+0x1b9/0x820 [ 543.910966] ? finish_task_switch+0x1d2/0x850 [ 543.915452] ? syscall_return_slowpath+0x5e0/0x5e0 [ 543.920377] ? syscall_return_slowpath+0x31d/0x5e0 [ 543.925387] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 543.930744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.935595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.940775] RIP: 0033:0x455b29 [ 543.943965] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.963365] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.971067] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 543.978322] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 543.985580] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 543.992837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 544.000092] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000059 13:27:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8dffffff00000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:04 executing program 4 (fault-call:7 fault-nth:90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x2000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0xfffffffffffffffd, r2, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) unshare(0x10800) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)={0x303, 0x33}, 0x4) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b5de7ffc6976"}, 0x14) 13:27:04 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x80000050000000) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000002c0)={0x0, 0x40, 0x1, 0x80}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r3 = dup2(r2, r2) r4 = dup2(r3, r3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x70, r5, 0x300, 0x70bd25, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfb51}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x74}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffe2b) 13:27:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x3ff) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f000073bffc), 0x4) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xffffffffffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c, &(0x7f0000f71000)}, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000001, r0, &(0x7f0000000140)="6236429649b97cdf708b2e69902ca15a7c99ce46e1941236c51f84a0a969f8ccb131890cef81b81229a28b5131e19950b44c8dda82cc430cd86dc9eff7fe79c920e56dfd13bbd20ba79b60e1b0ec6f3dc70e02202e697238884849c4fecb032d93572ded93f4f6c88e7be5b3c7b5d6d79acabacf88896e88da6daa89bfafbaa81d8289c686392882c5", 0x89, 0x8, 0x0, 0x1, r3}]) 13:27:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949e", 0xf, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 544.487284] binder: 3384:3390 ERROR: BC_REGISTER_LOOPER called without request [ 544.542648] FAULT_INJECTION: forcing a failure. [ 544.542648] name failslab, interval 1, probability 0, space 0, times 0 [ 544.554083] CPU: 1 PID: 3382 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 544.561026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.570409] Call Trace: [ 544.573009] dump_stack+0x1c9/0x2b4 [ 544.576637] ? dump_stack_print_info.cold.2+0x52/0x52 [ 544.581828] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 544.586677] should_fail.cold.4+0xa/0x1a [ 544.590742] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 544.597411] ? kasan_kmalloc+0xc4/0xe0 [ 544.601302] ? kasan_slab_alloc+0x12/0x20 [ 544.605445] ? kmem_cache_alloc+0x12e/0x760 [ 544.609755] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 544.614683] ? kvm_mmu_load+0x21/0x10e0 [ 544.618649] ? vcpu_enter_guest+0x3aa6/0x6090 [ 544.623153] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 544.628162] ? graph_lock+0x170/0x170 [ 544.631953] ? do_syscall_64+0x1b9/0x820 [ 544.636021] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.641385] ? find_held_lock+0x36/0x1c0 [ 544.645438] ? __lock_is_held+0xb5/0x140 [ 544.649505] ? check_same_owner+0x340/0x340 [ 544.653822] ? rcu_note_context_switch+0x730/0x730 [ 544.658745] __should_failslab+0x124/0x180 [ 544.662970] should_failslab+0x9/0x14 [ 544.666758] kmem_cache_alloc+0x2af/0x760 [ 544.670901] ? alloc_pages_current+0x114/0x210 [ 544.675488] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 544.680419] mmu_topup_memory_caches+0x2fa/0x3a0 [ 544.685170] ? kvm_apic_has_interrupt+0xe9/0x230 [ 544.689920] kvm_mmu_load+0x21/0x10e0 [ 544.693718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.699247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.704781] vcpu_enter_guest+0x3aa6/0x6090 [ 544.709095] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 544.713326] ? kvm_set_msr_common+0x26a0/0x26a0 [ 544.717991] ? zap_class+0x740/0x740 [ 544.721697] ? vmx_vcpu_load+0xadf/0xff0 [ 544.725750] ? __lock_acquire+0x7fc/0x5020 [ 544.729996] ? vmx_vcpu_reset+0x1040/0x1040 [ 544.734309] ? graph_lock+0x170/0x170 [ 544.738109] ? __lock_is_held+0xb5/0x140 [ 544.742167] ? lock_acquire+0x1e4/0x540 [ 544.746128] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 544.751137] ? lock_release+0xa30/0xa30 [ 544.755100] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 544.760366] ? kvm_arch_dev_ioctl+0x610/0x610 [ 544.764847] ? preempt_notifier_dec+0x20/0x20 [ 544.769336] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 544.774166] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 544.779180] kvm_vcpu_ioctl+0x7b8/0x1300 [ 544.783230] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 544.788945] ? find_held_lock+0x36/0x1c0 [ 544.793007] ? lock_downgrade+0x8f0/0x8f0 [ 544.797151] ? rcu_is_watching+0x8c/0x150 [ 544.801374] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 544.805787] ? __fget+0x414/0x670 [ 544.809231] ? match_held_lock+0x821/0x8d0 [ 544.813458] ? expand_files.part.8+0x9c0/0x9c0 [ 544.818034] ? kasan_check_write+0x14/0x20 [ 544.822269] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 544.827198] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 544.832916] do_vfs_ioctl+0x1de/0x1720 [ 544.836798] ? ioctl_preallocate+0x300/0x300 [ 544.841207] ? __fget_light+0x2f7/0x440 [ 544.845172] ? fget_raw+0x20/0x20 [ 544.848629] ? __sb_end_write+0xac/0xe0 [ 544.852609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 544.858141] ? fput+0x130/0x1a0 [ 544.861408] ? ksys_write+0x1ae/0x260 [ 544.865211] ? security_file_ioctl+0x94/0xc0 [ 544.869612] ksys_ioctl+0xa9/0xd0 [ 544.873060] __x64_sys_ioctl+0x73/0xb0 [ 544.876936] do_syscall_64+0x1b9/0x820 [ 544.880810] ? finish_task_switch+0x1d2/0x850 [ 544.885303] ? syscall_return_slowpath+0x5e0/0x5e0 [ 544.890220] ? syscall_return_slowpath+0x31d/0x5e0 [ 544.895146] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 544.900505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.905373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.910550] RIP: 0033:0x455b29 [ 544.913729] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 544.933037] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:27:04 executing program 3: kexec_load(0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000100)}, {&(0x7f0000000380), 0x0, 0x0, 0x3}], 0x2a0000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x4, 0x81}, 0x0, 0xfffffffffffffff9, 0x0, {0x1, 0xed0f}, 0x8, 0xfbf1c84}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x40000) init_module(&(0x7f0000000100)='/dev/rfkill\x00', 0xc, &(0x7f0000000200)='securitysystemeth0\x00') ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000240)=0x8001) uselib(&(0x7f00000000c0)='./file0\x00') 13:27:04 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x7ffff000}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) close(r0) r2 = memfd_create(&(0x7f0000000080)='cgroup\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x4000}, 0x90) tkill(r1, 0x1000000000016) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8) [ 544.940744] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 544.948012] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 544.955278] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 544.962536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 544.969802] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005a 13:27:05 executing program 4 (fault-call:7 fault-nth:91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x7, 0xffffffff, 0x4, 0x2}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x2, 0x10}, &(0x7f0000000140)=0xc) quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)) 13:27:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:05 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x6}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setstatus(r0, 0x4, 0x200000000003ffff) [ 545.208379] FAULT_INJECTION: forcing a failure. [ 545.208379] name failslab, interval 1, probability 0, space 0, times 0 [ 545.220175] CPU: 0 PID: 3419 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 545.220187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.220193] Call Trace: [ 545.220216] dump_stack+0x1c9/0x2b4 [ 545.220238] ? dump_stack_print_info.cold.2+0x52/0x52 [ 545.220259] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 545.220287] should_fail.cold.4+0xa/0x1a 13:27:05 executing program 3: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getgid() getgroups(0x40000000000001f9, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]) setgid(r1) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) kexec_load(0x8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="e15da901e33c1d85367cacfed2bb91a2c58223096276ce7531561628f55e4047be607360328d955994b594c35d2d632fc9255ee95682c4474cbee78544bfdae83b88308abbfaa0eb6c58c9186dfe86312d63286554a1c2ba8dfe69e864a26a365a7b06c0c6e4769da53be5fe0f924fbfff3e527f1391f1e5a43bb0ab3b03ad952280355d4bf28b56e171fdcf8a8b9d2f2136bdcb0e25da6cad312c33b8a594aebee87c28a4a1ab3669e841526a3b56ab85735b96a79e9d893cf7ca417af614c6a917c992a58a8d695d42e79da3866012da1ccfbfaeb553", 0xd7, 0x3, 0x100000001}, {&(0x7f0000000340)="ef3dd61a50d8bc1a15391aca0fc947db3ac2996654ce15807a0dd73b27eace95", 0x20, 0x3, 0x1000}], 0xa0000) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10001, 0x80000) getsockopt$inet6_int(r2, 0x29, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) listxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)=""/158, 0x9e) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="ffce1c1c39748e05f45c1d50a4dba670", 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e20, @multicast1=0xe0000001}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x4e23}, 'ip6gretap0\x00'}) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000140)={0x7, 0x4e2, 0x6, 0x6, 0x8}) [ 545.220309] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 545.220327] ? kasan_kmalloc+0xc4/0xe0 [ 545.220342] ? kasan_slab_alloc+0x12/0x20 [ 545.220355] ? kmem_cache_alloc+0x12e/0x760 [ 545.220372] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.220388] ? kvm_mmu_load+0x21/0x10e0 [ 545.220403] ? vcpu_enter_guest+0x3aa6/0x6090 [ 545.220417] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 545.220434] ? graph_lock+0x170/0x170 [ 545.220450] ? do_syscall_64+0x1b9/0x820 [ 545.220468] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.220490] ? find_held_lock+0x36/0x1c0 [ 545.220511] ? __lock_is_held+0xb5/0x140 [ 545.220538] ? check_same_owner+0x340/0x340 [ 545.220556] ? rcu_note_context_switch+0x730/0x730 [ 545.220577] __should_failslab+0x124/0x180 [ 545.220595] should_failslab+0x9/0x14 [ 545.220609] kmem_cache_alloc+0x2af/0x760 [ 545.220629] ? alloc_pages_current+0x114/0x210 [ 545.220646] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.220665] mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.220681] ? kvm_apic_has_interrupt+0xe9/0x230 [ 545.220703] kvm_mmu_load+0x21/0x10e0 [ 545.220720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.220738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.220758] vcpu_enter_guest+0x3aa6/0x6090 [ 545.220776] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 545.220800] ? kvm_set_msr_common+0x26a0/0x26a0 [ 545.220817] ? zap_class+0x740/0x740 [ 545.220837] ? perf_trace_lock+0x920/0x920 [ 545.220856] ? __lock_acquire+0x7fc/0x5020 [ 545.220873] ? vmx_vcpu_reset+0x1040/0x1040 [ 545.220889] ? graph_lock+0x170/0x170 [ 545.220921] ? __lock_is_held+0xb5/0x140 [ 545.220941] ? lock_acquire+0x1e4/0x540 [ 545.220954] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 545.220973] ? lock_release+0xa30/0xa30 [ 545.220987] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 545.221012] ? kvm_arch_dev_ioctl+0x610/0x610 [ 545.221028] ? preempt_notifier_dec+0x20/0x20 [ 545.221055] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 545.221069] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 545.221095] kvm_vcpu_ioctl+0x7b8/0x1300 [ 545.221113] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 545.221135] ? find_held_lock+0x36/0x1c0 [ 545.445461] binder: BINDER_SET_CONTEXT_MGR already set [ 545.446534] ? lock_downgrade+0x8f0/0x8f0 [ 545.446554] ? rcu_is_watching+0x8c/0x150 [ 545.451757] binder: 3384:3436 ioctl 40046207 0 returned -16 [ 545.456331] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 545.456360] ? __fget+0x414/0x670 [ 545.456379] ? match_held_lock+0x821/0x8d0 [ 545.456395] ? expand_files.part.8+0x9c0/0x9c0 [ 545.456412] ? kasan_check_write+0x14/0x20 [ 545.456428] ? __mutex_unlock_slowpath+0x197/0x8c0 13:27:05 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000980)="454ccafb5863695d5fac0709db14073064", 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="06c5db6b710c74aa7fc8afabbc709cfcfe37c826b53f0d3c6291dc5934819a3ced009ff0566fe01b50ce1ad119365fdc3b2713ba3de2e94759539bcaef3a68a4bfac0a1fa82de699905549f07915a51f383706e248aeb5a788e8dee6291416e97e8efb0505f003057c8c2b0c9fbc99cd4eb263cb5e371ec9acd7255774d21a47f37bb629a4c858929b433c958c6f48897d10ea7d171af486765ea21799205c32666a197f4e1294d1e164a34594eefcaa5b3c4301e34d", 0xb6) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000900)=0x141, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004500), 0x0, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) [ 545.456450] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 545.456470] do_vfs_ioctl+0x1de/0x1720 [ 545.474236] binder: 3384:3433 ERROR: BC_REGISTER_LOOPER called without request [ 545.479813] ? ioctl_preallocate+0x300/0x300 [ 545.479831] ? __fget_light+0x2f7/0x440 [ 545.479848] ? fget_raw+0x20/0x20 [ 545.479865] ? __sb_end_write+0xac/0xe0 [ 545.479886] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 545.479899] ? fput+0x130/0x1a0 [ 545.479912] ? ksys_write+0x1ae/0x260 [ 545.479933] ? security_file_ioctl+0x94/0xc0 [ 545.479950] ksys_ioctl+0xa9/0xd0 [ 545.558952] __x64_sys_ioctl+0x73/0xb0 [ 545.558974] do_syscall_64+0x1b9/0x820 [ 545.566761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 545.571706] ? syscall_return_slowpath+0x31d/0x5e0 [ 545.576672] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 545.582056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.586921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.592119] RIP: 0033:0x455b29 13:27:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66", 0x12, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0xfffffffe, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:05 executing program 1: r0 = semget$private(0x0, 0x4, 0x202) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='/dev/binder#\x00', &(0x7f0000000100)='vboxnet0\x00', &(0x7f0000000180)='eth1\'$,md5sum\x00', &(0x7f00000002c0)='/dev/input/mice\x00'], &(0x7f0000000440), 0x0) 13:27:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0xec, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, [{[], {0x8100, 0x8, 0x3f, 0x2}}], {@x25={0x805, {0x0, 0xfff, 0xff, "b78a80aae8346fe674264fbccfa4ea7bb5f7641ea6639a9b290c015a75f0f0ec97bd91d88abf01faa3deb008f3ed329455d0aa2ec2d12132ef52f12593ae8cdbc07845da367a49b6edf38c64ead3c1537ed980683cf4c89e5e71595de64b2ed5978d4d937ba3dd7d969862c4630f233622fad540b80257cf0c3a8909db93ab03fe9ad0309b6cf81d3c46e4809fbc36b5f761570a877b68206d2b35b55903efbd0ef71e88d91e009fdd94b0f520cd596f65673cbcef8da7dcd3856f6de33c7c40a11cd0b37a467abb7b8ab44988cf95dbf9f69ead68834d"}}}}, &(0x7f0000000140)={0x1, 0x1, [0xa5b, 0x3f5, 0xf36, 0x1ec]}) [ 545.595305] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.614716] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.622444] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 545.629727] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 545.637015] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 545.644299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 545.651583] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005b 13:27:05 executing program 4 (fault-call:7 fault-nth:92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:05 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 545.698927] binder: 3447:3448 ERROR: BC_REGISTER_LOOPER called without request 13:27:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8400, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000180)={0x0, 0x7, 0x9, &(0x7f0000000140)}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, &(0x7f0000000080), &(0x7f00000000c0)=0x332) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x4000) close(r2) close(r1) [ 545.821596] FAULT_INJECTION: forcing a failure. [ 545.821596] name failslab, interval 1, probability 0, space 0, times 0 [ 545.833068] CPU: 1 PID: 3466 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 545.840011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.849377] Call Trace: [ 545.852002] dump_stack+0x1c9/0x2b4 [ 545.855660] ? dump_stack_print_info.cold.2+0x52/0x52 [ 545.860881] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 545.865761] should_fail.cold.4+0xa/0x1a [ 545.869855] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 545.874984] ? kasan_kmalloc+0xc4/0xe0 [ 545.878903] ? kasan_slab_alloc+0x12/0x20 [ 545.883067] ? kmem_cache_alloc+0x12e/0x760 [ 545.887398] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.892345] ? kvm_mmu_load+0x21/0x10e0 [ 545.896338] ? vcpu_enter_guest+0x3aa6/0x6090 [ 545.900863] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 545.905906] ? graph_lock+0x170/0x170 [ 545.909727] ? do_syscall_64+0x1b9/0x820 [ 545.913814] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.919211] ? find_held_lock+0x36/0x1c0 [ 545.923302] ? __lock_is_held+0xb5/0x140 [ 545.927398] ? check_same_owner+0x340/0x340 [ 545.931743] ? rcu_note_context_switch+0x730/0x730 [ 545.936696] __should_failslab+0x124/0x180 [ 545.940959] should_failslab+0x9/0x14 [ 545.944777] kmem_cache_alloc+0x2af/0x760 [ 545.948951] ? alloc_pages_current+0x114/0x210 [ 545.953555] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.958517] mmu_topup_memory_caches+0x2fa/0x3a0 [ 545.963299] ? kvm_apic_has_interrupt+0xe9/0x230 [ 545.968087] kvm_mmu_load+0x21/0x10e0 [ 545.971922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.977496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.983067] vcpu_enter_guest+0x3aa6/0x6090 [ 545.987413] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 545.991681] ? kvm_set_msr_common+0x26a0/0x26a0 [ 545.996374] ? zap_class+0x740/0x740 [ 546.000106] ? perf_trace_lock+0x920/0x920 [ 546.004357] ? __lock_acquire+0x7fc/0x5020 [ 546.008601] ? vmx_vcpu_reset+0x1040/0x1040 [ 546.012934] ? graph_lock+0x170/0x170 [ 546.016771] ? __lock_is_held+0xb5/0x140 13:27:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/mnt\x00') fallocate(r1, 0x1, 0x0, 0x20000005) ftruncate(r1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) sched_getscheduler(r3) 13:27:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1cd402, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x80, 0x0) r5 = dup(r0) r6 = syz_open_dev$usbmon(&(0x7f0000000780)='/dev/usbmon#\x00', 0xed, 0x82002) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x121002, 0x0) io_submit(r1, 0x7, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000180)="31b8e2c90b77d963931f1f233111d234d0ba4c91405e2548d2a57bffde55c3020c696a91836a61609d54e767b1ed4876171a579037d27b705fdf19571fa57a5dee43ce963ab798905223363653a8c48f4540d0c14d9f6156753c576d629fe6fd1b2f2aaa6e8b54c64f9b4f3f5d4e4ea9aea78f63bdef01cf13370816282d6294371c7817129f48560933e8016bad17101c8c3518b09db512c1233005efaac520775aada5f93da781eff891dd95669d5325c9f4bc55901aa3b7117a84f28d08bf377a0f18c5ca06807836ec9a1f07583c36ca408445f95d9120d31c15ba76381892", 0xe1, 0x55, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000280)="88228de3780d959833218e30cc861af65b25bc204c62cf87be2a88cad3133e4544af84735d77aa8bf277aac91ca7317740644b9ee1fd8d68e0b79a18618fd408ca48fbf3d26cbba59cbb8e4f3e44799aab008ddccce009272d7bbe14b1cc07cbaa7660522e1558eab105ceedfc7d84bedcc3d8c0dea9ed7df52852bf443e52cf001cad17f99e2ad87b988a81bfd707815823af5883bb0b93bdd60cd2cd107f93cdf718bbe75e38c88b03aefa6b2269245d", 0xb1, 0x8001, 0x0, 0x0, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f00000003c0)="f84ef9f7ee0aa9ca9a43670d725e885eac80406176305829f7a17cf861f08a1ecf7548c700c72ac2f5882780371e8b56c4c7b74bf1500fa998b0e4d3739ad3b436e48d3138813398c06e45c2e792a5ead9d48777f74ff92a891e70f9110e72f228a2fe231d921f79462cf190572d66c7a4d5f0e9549e65298027ee2ff6a0decce9fb01debcdde4940830dbae7370564bce7cbbda6e0d3e2f6f00203a139021cacdb6e0cae3b180ba4a4f59b554ae6acc35f3dd2f51157c68ed55076c1664e3cc2dee5f7bad3355c368cdbbc0b7137fcb109d63801ad0", 0xd6, 0x1, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xa, 0x8, r0, &(0x7f0000000500)="0b6a8dc30adf259a4e040c569434cee0b1a5bcda21beb91cb84b304632e40fe615da2f109fa85fdd5c66981261094d7f23dbee066f6dffabe79a0dd6f7562872f43e3d8455574566ad99a10429ab9416fc41c663b71b162a11e7d06d93a12bf06daecdb67d7b9029e14162d8a108dd036c4203084d575f8133f564b495f63fa57aa98a9dd9a7d721adc8672a1e67c4438c90e7570dad0183571ee53ee55266ee77df79ec517617b69660a8348d67b1718b9c073c3e94fd59f7caf44e51d6657a52293d428d3d7231f418765c8525", 0xce, 0x3, 0x0, 0x0, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000680)="ae2bcc9e7a306023f789e8a847c53047fa5adbf13b5558be409b925dc79b7bbd874d7ba6cc4836b087d54eec0d494aa964", 0x31, 0x1, 0x0, 0x0, r5}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000700)="97dfc24c3f38f80359e10530401cb3eb6f548b2da82092126aed05a87075251d5abf50e5d47dc92e7156ae0765699a7aea649dd8604815d491eeb4c16000b45d44cdb934", 0x44, 0x8001, 0x0, 0x1, r6}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000800)="fb20e93685fb59483bd9784085f802935736681e1bcaf1", 0x17, 0x1, 0x0, 0x1, r7}]) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="88", 0x1}]) [ 546.020869] ? lock_acquire+0x1e4/0x540 [ 546.024861] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 546.029903] ? lock_release+0xa30/0xa30 [ 546.033920] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 546.039216] ? kvm_arch_dev_ioctl+0x610/0x610 [ 546.043724] ? preempt_notifier_dec+0x20/0x20 [ 546.048249] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 546.053133] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 546.058188] kvm_vcpu_ioctl+0x7b8/0x1300 [ 546.062266] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 546.068001] ? find_held_lock+0x36/0x1c0 [ 546.072081] ? lock_downgrade+0x8f0/0x8f0 [ 546.076246] ? rcu_is_watching+0x8c/0x150 [ 546.080424] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 546.084857] ? __fget+0x414/0x670 [ 546.088326] ? match_held_lock+0x821/0x8d0 [ 546.092576] ? expand_files.part.8+0x9c0/0x9c0 [ 546.097178] ? kasan_check_write+0x14/0x20 [ 546.101431] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 546.106376] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 546.112098] do_vfs_ioctl+0x1de/0x1720 [ 546.116032] ? ioctl_preallocate+0x300/0x300 [ 546.120544] ? __fget_light+0x2f7/0x440 [ 546.124514] ? fget_raw+0x20/0x20 [ 546.127968] ? __sb_end_write+0xac/0xe0 [ 546.131955] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 546.137497] ? fput+0x130/0x1a0 [ 546.140780] ? ksys_write+0x1ae/0x260 [ 546.144578] ? security_file_ioctl+0x94/0xc0 [ 546.148985] ksys_ioctl+0xa9/0xd0 [ 546.152438] __x64_sys_ioctl+0x73/0xb0 [ 546.156333] do_syscall_64+0x1b9/0x820 [ 546.160207] ? finish_task_switch+0x1d2/0x850 [ 546.164697] ? syscall_return_slowpath+0x5e0/0x5e0 [ 546.169626] ? syscall_return_slowpath+0x31d/0x5e0 [ 546.174556] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 546.179918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.184759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.189946] RIP: 0033:0x455b29 [ 546.193135] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 546.212508] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:27:06 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x40) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/63) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) getpid() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='envZron\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0016734c05b934e554000000"]) 13:27:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x19}}, 0x23) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:06 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2040, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x4}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000001c0)=0x8000) pwritev(r3, &(0x7f0000001480)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0) [ 546.220219] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 546.227484] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 546.234744] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 546.242001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 546.249273] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005c 13:27:06 executing program 4 (fault-call:7 fault-nth:93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 546.351429] Unknown ioctl 20996 13:27:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) r1 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="a63f2ce0707cfa89e1126dcc3aaae58b13b45bc3b9c6ee37092fb7defd4ba0b15136af004ba7c296060bb875f88e766b7280bbebb4f8711556f453d11fe618882fd87382bd1fb3ddbca54e3e1207e3b2d0a2ba683f721c85f7ce9d76ffc4926a60dc515f", 0x64, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)='\\vmnet1\x00') r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x37, &(0x7f0000000000), 0x20a154cc) [ 546.372150] Unknown ioctl 20996 13:27:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$inet6(0xa, 0x8000e, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0xfff, 0x0, 0x0, 0x1000, 0x3, 0xc9, 0xfffffffffffffff9, {r3, @in6={{0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, 0x37, 0xffffffff, 0x1, 0xfffffffffffffff7, 0x8}}, &(0x7f0000000280)=0xb0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') lseek(r0, 0x0, 0x0) sendfile(r0, r4, &(0x7f0000000000)=0x48000000, 0xff) 13:27:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x405) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 546.506881] binder: undelivered transaction 440, put_user failed [ 546.516543] binder: 3447:3448 ioctl c0306201 200000c0 returned -14 [ 546.523495] FAULT_INJECTION: forcing a failure. [ 546.523495] name failslab, interval 1, probability 0, space 0, times 0 [ 546.535008] CPU: 0 PID: 3506 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 546.540142] binder: BINDER_SET_CONTEXT_MGR already set [ 546.541940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.541946] Call Trace: [ 546.541974] dump_stack+0x1c9/0x2b4 [ 546.541994] ? dump_stack_print_info.cold.2+0x52/0x52 [ 546.547480] binder: 3447:3448 ioctl 40046207 0 returned -16 [ 546.556675] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 546.556702] should_fail.cold.4+0xa/0x1a [ 546.556722] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 546.556741] ? kasan_kmalloc+0xc4/0xe0 [ 546.556752] ? kasan_slab_alloc+0x12/0x20 [ 546.556770] ? kmem_cache_alloc+0x12e/0x760 [ 546.572770] binder: 3447:3448 ERROR: BC_REGISTER_LOOPER called without request [ 546.574471] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 546.574490] ? kvm_mmu_load+0x21/0x10e0 [ 546.574506] ? vcpu_enter_guest+0x3aa6/0x6090 [ 546.574522] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 546.626491] ? graph_lock+0x170/0x170 [ 546.630285] ? do_syscall_64+0x1b9/0x820 [ 546.634337] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.639707] ? find_held_lock+0x36/0x1c0 [ 546.643766] ? __lock_is_held+0xb5/0x140 [ 546.647830] ? check_same_owner+0x340/0x340 [ 546.652146] ? rcu_note_context_switch+0x730/0x730 [ 546.657077] __should_failslab+0x124/0x180 [ 546.661312] should_failslab+0x9/0x14 [ 546.665104] kmem_cache_alloc+0x2af/0x760 [ 546.669249] ? alloc_pages_current+0x114/0x210 [ 546.673824] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 546.678758] mmu_topup_memory_caches+0x2fa/0x3a0 [ 546.683506] ? kvm_apic_has_interrupt+0xe9/0x230 [ 546.688260] kvm_mmu_load+0x21/0x10e0 [ 546.692057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.697595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.703128] vcpu_enter_guest+0x3aa6/0x6090 [ 546.707444] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 546.711685] ? kvm_set_msr_common+0x26a0/0x26a0 [ 546.716354] ? perf_trace_lock+0x920/0x920 [ 546.720607] ? __lock_acquire+0x7fc/0x5020 [ 546.724832] ? vmx_vcpu_reset+0x1040/0x1040 [ 546.729155] ? graph_lock+0x170/0x170 [ 546.732950] ? __lock_acquire+0x7fc/0x5020 [ 546.737194] ? __lock_is_held+0xb5/0x140 [ 546.741256] ? lock_acquire+0x1e4/0x540 [ 546.745223] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 546.750239] ? lock_release+0xa30/0xa30 [ 546.754206] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 546.759475] ? kvm_arch_dev_ioctl+0x610/0x610 [ 546.763963] ? preempt_notifier_dec+0x20/0x20 [ 546.768462] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 546.773305] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 546.778322] kvm_vcpu_ioctl+0x7b8/0x1300 [ 546.782464] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 546.788171] ? find_held_lock+0x36/0x1c0 [ 546.792229] ? find_held_lock+0x36/0x1c0 [ 546.796290] ? lock_downgrade+0x8f0/0x8f0 [ 546.800433] ? kasan_check_read+0x11/0x20 [ 546.804570] ? rcu_is_watching+0x8c/0x150 [ 546.808708] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 546.813120] ? __fget+0x414/0x670 [ 546.816585] ? match_held_lock+0x821/0x8d0 [ 546.820814] ? expand_files.part.8+0x9c0/0x9c0 [ 546.825387] ? kasan_check_write+0x14/0x20 [ 546.829613] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 546.834542] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 546.840247] do_vfs_ioctl+0x1de/0x1720 [ 546.844129] ? __lock_is_held+0xb5/0x140 [ 546.848186] ? ioctl_preallocate+0x300/0x300 [ 546.852585] ? __fget_light+0x2f7/0x440 [ 546.856551] ? fget_raw+0x20/0x20 [ 546.860008] ? __sb_end_write+0xac/0xe0 [ 546.863983] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 546.869520] ? fput+0x130/0x1a0 [ 546.872799] ? ksys_write+0x1ae/0x260 [ 546.876597] ? security_file_ioctl+0x94/0xc0 [ 546.881000] ksys_ioctl+0xa9/0xd0 [ 546.884464] __x64_sys_ioctl+0x73/0xb0 [ 546.888347] do_syscall_64+0x1b9/0x820 [ 546.892231] ? finish_task_switch+0x1d2/0x850 [ 546.897664] ? syscall_return_slowpath+0x5e0/0x5e0 [ 546.902597] ? syscall_return_slowpath+0x31d/0x5e0 [ 546.907533] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 546.912898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.917739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.922930] RIP: 0033:0x455b29 [ 546.926119] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 546.945500] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.953214] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 546.960475] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 546.967735] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 546.975011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 546.982288] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005d [ 547.079834] binder: undelivered TRANSACTION_COMPLETE 13:27:07 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xa, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:07 executing program 6: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x1ff, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01ad4551c86a591cebe1bbec8c54a95ecc349010f234bd4bafc5b34b2660f1941e81d3f282de151d819b740eca24d5924c9fe3e154d1178b2f69561b227c032d49cfd8aab9910ad649f42bb2489abd5ec384793f996dc04da78d6d8d393582c7549f9b7dda9e62915e4234081ec87784c7223b3221c9000000000000000000000000000000"]) ioctl$KVM_X86_SET_MCE(r4, 0x4080aea2, &(0x7f0000000140)) r5 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x240) connect$vsock_dgram(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) 13:27:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000070]}) 13:27:07 executing program 3: clock_gettime(0x8000000000, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000240)={{}, {r0, r1/1000+10000}}, &(0x7f0000000440)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x6c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x4e24}}) setgid(r3) r4 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x410000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000140)=0x80) 13:27:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6000000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:07 executing program 4 (fault-call:7 fault-nth:94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66", 0x12, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffe0ff16040000ffffffffffac14ffbbe00000010000000000089078ea63fdf485bb5cb68c3de4a4600026606efcd7aca33d8a058597103f6c300f57260b75409d6de98f840f72ae6e1e1d"], 0x0) [ 547.358843] binder: 3541:3542 ERROR: BC_REGISTER_LOOPER called without request [ 547.418638] FAULT_INJECTION: forcing a failure. [ 547.418638] name failslab, interval 1, probability 0, space 0, times 0 [ 547.430157] CPU: 1 PID: 3544 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 547.437088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.446443] Call Trace: [ 547.449041] dump_stack+0x1c9/0x2b4 [ 547.452670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 547.457879] should_fail.cold.4+0xa/0x1a [ 547.461948] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 547.467053] ? kasan_kmalloc+0xc4/0xe0 [ 547.470935] ? kasan_slab_alloc+0x12/0x20 [ 547.475085] ? kmem_cache_alloc+0x12e/0x760 [ 547.479425] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 547.484374] ? kvm_mmu_load+0x21/0x10e0 [ 547.488351] ? vcpu_enter_guest+0x3aa6/0x6090 [ 547.492845] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 547.497904] ? graph_lock+0x170/0x170 [ 547.501703] ? do_syscall_64+0x1b9/0x820 [ 547.505766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 547.511143] ? find_held_lock+0x36/0x1c0 [ 547.515210] ? __lock_is_held+0xb5/0x140 [ 547.519292] ? check_same_owner+0x340/0x340 [ 547.523618] ? rcu_note_context_switch+0x730/0x730 [ 547.528555] __should_failslab+0x124/0x180 [ 547.532791] should_failslab+0x9/0x14 [ 547.536592] kmem_cache_alloc+0x2af/0x760 [ 547.540752] ? alloc_pages_current+0x114/0x210 [ 547.545339] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 547.550290] mmu_topup_memory_caches+0x2fa/0x3a0 [ 547.555044] ? kvm_apic_has_interrupt+0xe9/0x230 [ 547.559816] kvm_mmu_load+0x21/0x10e0 [ 547.563617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 547.569156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 547.574698] vcpu_enter_guest+0x3aa6/0x6090 [ 547.579036] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 547.583284] ? kvm_set_msr_common+0x26a0/0x26a0 [ 547.587960] ? zap_class+0x740/0x740 [ 547.591677] ? vmx_vcpu_load+0xadf/0xff0 [ 547.595741] ? __lock_acquire+0x7fc/0x5020 [ 547.599978] ? vmx_vcpu_reset+0x1040/0x1040 [ 547.604301] ? graph_lock+0x170/0x170 [ 547.608119] ? __lock_is_held+0xb5/0x140 [ 547.612186] ? lock_acquire+0x1e4/0x540 [ 547.616157] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 547.621176] ? lock_release+0xa30/0xa30 [ 547.625145] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 547.630423] ? kvm_arch_dev_ioctl+0x610/0x610 [ 547.634923] ? preempt_notifier_dec+0x20/0x20 [ 547.639437] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 547.644282] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 547.649312] kvm_vcpu_ioctl+0x7b8/0x1300 [ 547.653392] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 547.659113] ? find_held_lock+0x36/0x1c0 [ 547.663197] ? lock_downgrade+0x8f0/0x8f0 [ 547.667350] ? rcu_is_watching+0x8c/0x150 [ 547.671497] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 547.675940] ? __fget+0x414/0x670 [ 547.679402] ? match_held_lock+0x821/0x8d0 [ 547.683727] ? expand_files.part.8+0x9c0/0x9c0 [ 547.688397] ? kasan_check_write+0x14/0x20 [ 547.692635] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 547.697662] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 547.703384] do_vfs_ioctl+0x1de/0x1720 [ 547.707276] ? ioctl_preallocate+0x300/0x300 [ 547.711683] ? __fget_light+0x2f7/0x440 [ 547.715657] ? fget_raw+0x20/0x20 [ 547.719110] ? __sb_end_write+0xac/0xe0 [ 547.723101] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 547.728637] ? fput+0x130/0x1a0 [ 547.731919] ? ksys_write+0x1ae/0x260 [ 547.735725] ? security_file_ioctl+0x94/0xc0 [ 547.740139] ksys_ioctl+0xa9/0xd0 [ 547.743598] __x64_sys_ioctl+0x73/0xb0 [ 547.747490] do_syscall_64+0x1b9/0x820 [ 547.751376] ? finish_task_switch+0x1d2/0x850 [ 547.755877] ? syscall_return_slowpath+0x5e0/0x5e0 [ 547.760809] ? syscall_return_slowpath+0x31d/0x5e0 [ 547.765743] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 547.771127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 547.775978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 547.781168] RIP: 0033:0x455b29 [ 547.784356] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 547.803791] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.811503] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 13:27:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet(0x2, 0x7, 0x5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xce, "c33cdc68d9a996824d7e0c4e7942b3ed976626dde14a9d30a86587120dc94fef8848f0dc380ec25c0bf6817f936813fa35ba74179728a8dcbe6f6cd1368615884de91f812468ee1ba65e91cecd5c7ad05df249a1ff52214cf97034caca6de7893edbc8ec938e15b8e4ad2bff09817a2dea635a2c86af90baddb220663a62d9496fdec01781e5ac4fa889986033f07941ca3dff5ee274acd2c97ddd49f5e167351382d1f5cbc79f2b7be7ea1a33a75c2265d3591f50561fd10d8c47ef38c75ed235e1db702759c3f36681fadd5d6b"}, &(0x7f0000000040)=0xd6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x81}, &(0x7f0000000280)=0x8) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/64, 0x3a) [ 547.818777] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 547.826045] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 547.833321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 547.840590] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005e 13:27:07 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:07 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x220800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001780)={0x0, @rand_addr, @broadcast}, &(0x7f00000017c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001800)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001900)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)=@report={0xe8, 0x20, 0x111, 0x70bd26, 0x25dfdbfc, {0x2b, {@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e22, 0x7, 0x4e22, 0x7d, 0xa, 0x80, 0xa0, 0xff, r1, r2}}, [@algo_auth={0x9c, 0x1, {{'sha3-224\x00'}, 0x298, "f971e6ee3a00cf17079553348afbbac49c9e08c60925162917307d080a608f21e569b8e6b2d4944d98e4f2478797ad9de168b68e8bfd720085df0255ce4762cf5c3c80a9a3213b4adf962343163194cdaeb48d"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40894}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:07 executing program 6: r0 = syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75736572492b2640bf6ce2fe07647281d06d02d4116c6de0afbbb7e43ecd2a90ffd2f7920c9d23204579b5283eb28ab15404c6"], &(0x7f0000000040)=']#\x00', 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/78, &(0x7f0000000180)=0x4e) 13:27:08 executing program 4 (fault-call:7 fault-nth:95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:08 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x2}) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000004500001c0000000000009078000000e0e000000100009078e0000000c714a3adac21"], 0x26) 13:27:08 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) msync(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x2) r1 = dup(r0) munmap(&(0x7f0000011000/0x2000)=nil, 0x2000) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x201000, 0xfffffffffffffc73) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000012000/0x3000)=nil, 0x3000}) [ 548.133382] FAULT_INJECTION: forcing a failure. [ 548.133382] name failslab, interval 1, probability 0, space 0, times 0 [ 548.144936] CPU: 0 PID: 3578 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 548.151967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.155518] binder: undelivered transaction 442, put_user failed [ 548.161387] Call Trace: [ 548.161413] dump_stack+0x1c9/0x2b4 [ 548.161434] ? dump_stack_print_info.cold.2+0x52/0x52 [ 548.161455] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 548.161484] should_fail.cold.4+0xa/0x1a [ 548.161502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 548.161522] ? kasan_kmalloc+0xc4/0xe0 [ 548.196344] binder: 3541:3542 ioctl c0306201 200000c0 returned -14 [ 548.197279] ? kasan_slab_alloc+0x12/0x20 [ 548.197297] ? kmem_cache_alloc+0x12e/0x760 [ 548.197316] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 548.197330] ? kvm_mmu_load+0x21/0x10e0 [ 548.197352] ? vcpu_enter_guest+0x3aa6/0x6090 [ 548.224863] binder: BINDER_SET_CONTEXT_MGR already set [ 548.225508] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 548.225526] ? graph_lock+0x170/0x170 [ 548.225545] ? do_syscall_64+0x1b9/0x820 [ 548.243771] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.249162] ? find_held_lock+0x36/0x1c0 [ 548.253247] ? __lock_is_held+0xb5/0x140 [ 548.257318] ? check_same_owner+0x340/0x340 [ 548.261631] ? rcu_note_context_switch+0x730/0x730 [ 548.266560] __should_failslab+0x124/0x180 [ 548.270789] should_failslab+0x9/0x14 [ 548.274576] kmem_cache_alloc+0x2af/0x760 [ 548.278714] ? alloc_pages_current+0x114/0x210 [ 548.283295] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 548.288224] mmu_topup_memory_caches+0x2fa/0x3a0 [ 548.292970] ? kvm_apic_has_interrupt+0xe9/0x230 [ 548.297718] kvm_mmu_load+0x21/0x10e0 [ 548.301511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.307045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.312587] vcpu_enter_guest+0x3aa6/0x6090 [ 548.316913] ? kvm_set_msr_common+0x26a0/0x26a0 [ 548.321576] ? zap_class+0x740/0x740 [ 548.325285] ? perf_trace_lock+0x920/0x920 [ 548.329526] ? __lock_acquire+0x7fc/0x5020 [ 548.333761] ? vmx_vcpu_reset+0x1040/0x1040 [ 548.338072] ? graph_lock+0x170/0x170 [ 548.341880] ? __lock_is_held+0xb5/0x140 [ 548.345941] ? lock_acquire+0x1e4/0x540 [ 548.349908] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 548.354926] ? lock_release+0xa30/0xa30 [ 548.358891] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 548.364161] ? kvm_arch_dev_ioctl+0x610/0x610 [ 548.368652] ? preempt_notifier_dec+0x20/0x20 [ 548.373156] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 548.377991] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 548.383013] kvm_vcpu_ioctl+0x7b8/0x1300 [ 548.387075] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 548.392792] ? find_held_lock+0x36/0x1c0 [ 548.396855] ? lock_downgrade+0x8f0/0x8f0 [ 548.400999] ? rcu_is_watching+0x8c/0x150 [ 548.405142] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 548.409551] ? __fget+0x414/0x670 [ 548.412997] ? match_held_lock+0x821/0x8d0 [ 548.417231] ? expand_files.part.8+0x9c0/0x9c0 [ 548.421899] ? kasan_check_write+0x14/0x20 [ 548.426139] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 548.431074] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 548.436775] do_vfs_ioctl+0x1de/0x1720 [ 548.440671] ? ioctl_preallocate+0x300/0x300 [ 548.445073] ? __fget_light+0x2f7/0x440 [ 548.449060] ? fget_raw+0x20/0x20 [ 548.452624] ? __sb_end_write+0xac/0xe0 [ 548.456596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 548.462123] ? fput+0x130/0x1a0 [ 548.465391] ? ksys_write+0x1ae/0x260 [ 548.469188] ? security_file_ioctl+0x94/0xc0 [ 548.473589] ksys_ioctl+0xa9/0xd0 [ 548.477042] __x64_sys_ioctl+0x73/0xb0 [ 548.480936] do_syscall_64+0x1b9/0x820 [ 548.484810] ? finish_task_switch+0x1d2/0x850 [ 548.489298] ? syscall_return_slowpath+0x5e0/0x5e0 [ 548.494233] ? syscall_return_slowpath+0x31d/0x5e0 [ 548.499175] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 548.504537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 548.509379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.514558] RIP: 0033:0x455b29 [ 548.517733] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 548.537118] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.544923] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 548.552180] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 548.559446] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 548.566704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 548.573961] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 000000000000005f 13:27:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x1fc, &(0x7f0000000100)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x402000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) [ 548.583303] binder: 3541:3542 ioctl 40046207 0 returned -16 [ 548.589542] binder: 3541:3542 ERROR: BC_REGISTER_LOOPER called without request [ 548.653875] binder: undelivered TRANSACTION_COMPLETE 13:27:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66", 0x12, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x1000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc) unshare(0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x14f) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup3(r0, r2, 0x80000) 13:27:08 executing program 4 (fault-call:7 fault-nth:96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xfffffffffffffffc, 0x100000000000000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r1, 0x14, "ff4c65bb862096acfa09f07642b4ebae395ee882"}, &(0x7f00000002c0)=0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="c0d5d19f8821f275eee3af58fac572f80bef063d8e0cb7b478f408478563f20afb2a58b5a159200bf54f878551b7a8a3c96e8daa3e08a3038f00253a48bb8c591dfb6cef9725", 0x46}], 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 13:27:08 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:08 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7, 0x20001, 0x2, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x402, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000240)={0x1ff, 0x10001, 0x3, 0x1, 0x5c53}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000180)={{0x3f, 0xfffffffffffffbff}, {0xc90, 0x1}, 0xed6, 0x0, 0x1}) [ 548.978350] binder: 3618:3620 ERROR: BC_REGISTER_LOOPER called without request [ 548.995322] QAT: Invalid ioctl [ 549.010620] QAT: Invalid ioctl [ 549.029588] FAULT_INJECTION: forcing a failure. [ 549.029588] name failslab, interval 1, probability 0, space 0, times 0 [ 549.041556] CPU: 1 PID: 3619 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 549.048491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.057857] Call Trace: [ 549.060464] dump_stack+0x1c9/0x2b4 [ 549.064124] ? dump_stack_print_info.cold.2+0x52/0x52 [ 549.069371] should_fail.cold.4+0xa/0x1a [ 549.073435] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 549.079154] ? kasan_kmalloc+0xc4/0xe0 [ 549.083035] ? kasan_slab_alloc+0x12/0x20 [ 549.087168] ? kmem_cache_alloc+0x12e/0x760 [ 549.091480] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.096408] ? kvm_mmu_load+0x21/0x10e0 [ 549.100378] ? vcpu_enter_guest+0x3aa6/0x6090 [ 549.104878] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.109900] ? graph_lock+0x170/0x170 [ 549.113710] ? do_syscall_64+0x1b9/0x820 [ 549.117770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.123135] ? find_held_lock+0x36/0x1c0 [ 549.127210] ? __lock_is_held+0xb5/0x140 [ 549.131269] ? check_same_owner+0x340/0x340 [ 549.135583] ? rcu_note_context_switch+0x730/0x730 [ 549.140505] __should_failslab+0x124/0x180 [ 549.144732] should_failslab+0x9/0x14 [ 549.148530] kmem_cache_alloc+0x2af/0x760 [ 549.152671] ? alloc_pages_current+0x114/0x210 [ 549.157246] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.162185] mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.166943] ? kvm_apic_has_interrupt+0xe9/0x230 [ 549.171706] kvm_mmu_load+0x21/0x10e0 [ 549.175587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.181116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.186644] vcpu_enter_guest+0x3aa6/0x6090 [ 549.190970] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 549.195212] ? kvm_set_msr_common+0x26a0/0x26a0 [ 549.199881] ? vmx_vcpu_load+0xadf/0xff0 [ 549.203936] ? __lock_acquire+0x7fc/0x5020 [ 549.208159] ? vmx_vcpu_reset+0x1040/0x1040 [ 549.212472] ? graph_lock+0x170/0x170 [ 549.216261] ? __lock_acquire+0x7fc/0x5020 [ 549.220505] ? __lock_is_held+0xb5/0x140 [ 549.224560] ? lock_acquire+0x1e4/0x540 [ 549.228528] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 549.233534] ? lock_release+0xa30/0xa30 [ 549.237492] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 549.242762] ? kvm_arch_dev_ioctl+0x610/0x610 [ 549.247350] ? preempt_notifier_dec+0x20/0x20 [ 549.251864] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.256694] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.261704] kvm_vcpu_ioctl+0x7b8/0x1300 [ 549.265765] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 549.271466] ? find_held_lock+0x36/0x1c0 [ 549.275527] ? find_held_lock+0x36/0x1c0 [ 549.279584] ? lock_downgrade+0x8f0/0x8f0 [ 549.283723] ? kasan_check_read+0x11/0x20 [ 549.288119] ? rcu_is_watching+0x8c/0x150 [ 549.292254] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 549.296659] ? __fget+0x414/0x670 [ 549.300100] ? match_held_lock+0x821/0x8d0 [ 549.304325] ? expand_files.part.8+0x9c0/0x9c0 [ 549.308914] ? kasan_check_write+0x14/0x20 [ 549.313139] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 549.318063] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 549.323765] do_vfs_ioctl+0x1de/0x1720 [ 549.328078] ? __lock_is_held+0xb5/0x140 [ 549.332128] ? ioctl_preallocate+0x300/0x300 [ 549.336524] ? __fget_light+0x2f7/0x440 [ 549.340487] ? fget_raw+0x20/0x20 [ 549.343932] ? __sb_end_write+0xac/0xe0 [ 549.347900] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 549.353426] ? fput+0x130/0x1a0 [ 549.356707] ? ksys_write+0x1ae/0x260 [ 549.360503] ? security_file_ioctl+0x94/0xc0 [ 549.364905] ksys_ioctl+0xa9/0xd0 [ 549.368350] __x64_sys_ioctl+0x73/0xb0 [ 549.372230] do_syscall_64+0x1b9/0x820 [ 549.376117] ? syscall_slow_exit_work+0x500/0x500 [ 549.380952] ? syscall_return_slowpath+0x5e0/0x5e0 [ 549.385887] ? syscall_return_slowpath+0x31d/0x5e0 [ 549.390823] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 549.396182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 549.401037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.406215] RIP: 0033:0x455b29 [ 549.409403] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:27:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x144, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd(0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80, 0x80) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000000c0)={0x7, 0x9, 0xfff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r1}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0xffff}, {0xa, 0x4e24, 0xac, @dev={0xfe, 0x80, [], 0xf}, 0x7}, 0x7, [0x9, 0x0, 0x51, 0xb4, 0xfffffffffffffffd, 0x8, 0x7ff, 0x6]}, 0x5c) write$eventfd(r1, &(0x7f0000000100)=0x4, 0xffffff43) 13:27:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02080001030000e30aaf4e887571af44"], 0x1d}, 0x1}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x336acd5b9252b47) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xd1, "8283ad62596587e1d4ad1c97304251192d3838ad9921347bce96b70aeae6945025bbfada5fcbc037f922caf60d7a353a3db2c528734c06938c319075574b03f33073401a797fcbc3551b5f4fe1557b5e1a0c83680c6e64fa046ff68502bb351e026e8de790f2242078ca84651176dd1b3ca4f513c9dfe788f957136ce54773ca9ed8fdc919a7bca963673aaa4804fadbb1525e454ad5c5377c841f9d918b70c40108eaf02f500ddc619ac087c3135f20c65a4a071b65ccc08a9ba169662f8eebacbffadc99f02554f795456ad49b88c86a"}, &(0x7f0000000280)=0xf5) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)=0x4) socket$key(0xf, 0x3, 0x2) [ 549.428668] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.436365] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 549.443640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 549.450896] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 549.458156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 549.465413] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000060 13:27:09 executing program 4 (fault-call:7 fault-nth:97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002080)={'bpq0\x00', 0x0}) sendmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="595f72b10e821b5a85a85a90f1c24c0f7c7f522185db5870e98d7b07d74693824050c2da4510f213ff9a1b69e01cd48e67c6dd98beba656b4ee1bf1d41789a7d24d7e624303b44935c2ef7b35e961fdb2d67c66df58f32b698ef6eea28a2ced98e568a88e7a99412c6b9958d1f8892455083fd89ea890e4bef", 0x79}, {&(0x7f00000000c0)="2668f0eb2c2cebeae796784ab26f117700d1841ba4831a214ebaec1e118285d46580040f38225d8dd015c0aab93af924768f27f8b4a793fd8ba77ef3c233995f603df8820aab12472dba56c2d292097ceed8d2143c414c9077866a4c489d7d1b8d27c41baa0982fea467f24ca2fdd70da57b5a5e743af7a14cd11f8d7b157fb9d63f8f7e4bca5e649fafbaf59cba8e635a34f74b2b65f8766d4deef6ff55fdbabf56", 0xa2}, {&(0x7f0000000200)="a035317f883cfb36e87a7e29413be99617172b6df6bb954ab6de910b962b2d45a827290697459b7107fe15ad090bb4946ce2", 0x32}, {&(0x7f0000000240)="f04c827a678bfa15bed4155dfdd52ee1ad76def36d7af723eb0f1d39e093c6970b7ad56ee672a34194664100c1fcb0aef1", 0x31}, {&(0x7f0000000280)="938e253271b70f20ede004de3212bde3ae55646f957130c34944e45cb4dcf8b565f8812048bbad39fbb8c8a154c023749bb6156a2f2a27600b0579ab9df8927eeb689fbcccc15ffaea028be651957f829b986bc13b3651246ccfa4b5230b507b839a327409c591d92d8a299e62fb744106192152b636fa22e4994c54154aafa9117a0f259ea0417e8edd411851fb6aea739aa6a9ebf9f0896e64613fd4a702cff8fea37441c41f0d1d5c02ab8599d107d2590f13ab8b7f1bd799e56aaf6e46963f275dd757c3d1c34a0c04", 0xcb}, {&(0x7f0000000380)="ba40d62780a3564f735fe92dedcb55d03f7367dc0010e58a07802024da7c28506689cf4eddfaf6fefb31a39f793055a0dd1b6ce96d808d0c22b13acf6888d9496cab6f36e16fe54fb22faa9d11b7ea03634e01770a835b23f308509f76ababc9aa6b2b6cfde7ef0b715e7b138a0e522a3c6ab786616fabf84eb2b9a65b8977358882a0cadad742e335b14b2617ed75cde80ec9340aaae3c10dbb6cc8f0eac603def86e8c061f07da89c9a01150e8b76f78bc1ffa411246c8455df2d78c2c49dfbcc8a36c44136f86dc98c38839f088460b512dbc06a32398c3cc05c5b0", 0xdd}, {&(0x7f0000000480)="b75a124f18967cbf0269893ab727df014fed8b1ea9cf301db926e6dd8f119187b7818dd41255a617ad9652500e156b68808d753673e20f07b0846aaa1592e642c21d2d696731fdcba5e0a1b2c05a0bfbb08d61c0b7c95c243839e4c8bab7a59e4c5b736523c7ff8c24384ff6e3f6928e718e071d7634f71def5a67c316802fe9db4fe5c96902059919f709664d74a58c5840895f98e7f50bdb1a8e975ca650a65da412d89df904b13f5e90b37ba20b37683f53152fef0c48faf2559e2b2af61f888acbbc1e987a3f55f1d004b1ad4c9fa2fc945e670d2768c287c3c559d9f23d7792ec57d50fab4271f0a668f85038ca4272", 0xf2}, {&(0x7f0000000580)="0c0c01df30e5d683c51420421ec58eecc528c7df59eae738d46a66d4fd08d596e94a0a85859342b6c5e1c542fcc42e9138cb22e753b349cb76dc65a7d2662a9e4e227b45b7ef14e12e502ebc64eb78e9d0198cfa00a10dd90e76d2bae9c5ed25670aa63f8fc5eebf0fc305919482953319c7dd07afb754bc62a022540c92f2b38c809f564ff5fb9a03e7d86f49b2652f9e1a8a46904e4494b1e2d600284eb7c1c979e890a09a182e40c99cf6f3e110d73c93ddf4", 0xb4}], 0x8, &(0x7f00000006c0)=[{0xe8, 0x10b, 0x100000000, "f1995f1c037c55a314af8af79ed55cfb2a9cf3afe315fa83d78c43c7a2f49d335d41707a5c5816490e27005c4ffd32d92003d650672c1c7ae14a73b845baa39124a94cc481c86d52c413058fe34fe515e230fc9bb389ed2a2c8fc2f76f0c88ec1457b029be3169b3f677619d0951e40f4f335307ae9934bab8e328d34b12eb2cb1a62057a22545639b0a97e36291012150b39d1b1ed974c8b51835ef733c24becca6d28abf688a14fc1505bce3caa8a818ffa6e6eec4557e20a03f0349e5962e9595e4cdf328d9d59966050933974deda2450ab0"}], 0xe8, 0x24000000}, 0x7000000000}, {{&(0x7f00000007c0)=@ax25={0x3, {"9824991d56b81e"}, 0x6}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000840)="d9884cc54d8454a1c8a199b7162eebd478e6b62a474df7de34c446aaab4923e87c56ae91eee3ab3126beefbbc4b762eeb374dfccf04968a0f545cc3b0e953dc48ee420e9b057d26dbfe7515b", 0x4c}, {&(0x7f00000008c0)="67b85f7da00e8ac18cbae76cbdf6fa0221d825efd0b831ada6da42f59c2c49d86a815c2791d31278f6e9ad5a71af617abd18085d765dd3654755de6fc471146cd2148c2df9eb11c7a610b8387e", 0x4d}, {&(0x7f0000000940)="dbd21a9e71906c68b79f4f16a3e542c2e7f8d379b13b60f73956a2de5eb752950ea6057a3df0936692ea92fe4fc6694f3cebcfc588ac30c119adb1d90a2531384977600bc0339afa400038b52884794f3c0184735ade2bb44475a8b8f19ea822dcd8d407d0f9530d5e0a7c20299907d4535f025c9c8edd5acf1988bb907ea066ce83a8", 0x83}, {&(0x7f0000000a00)="080a37da3fab6bb5639dfaa044beeb642e1edba049dad041", 0x18}, {&(0x7f0000000a40)="4c13fbf7a0954adff53f01296a6f2e5ddca8ad6b05588116dc9267aaaa53c54662e40a96c9eb78929303d3880106f3cecaec9b81f428", 0x36}, {&(0x7f0000000a80)="5c455d30d2e1caf82773755e313f3d8b56e90439b0504f0fe3bfbb2d9365b58ca7e28c48b1", 0x25}, {&(0x7f0000000ac0)="f64b356fa965f45a1565f21119c8fef2221ea8851ede2039fdbf2dcaa4defaf2ca57a418f56f2d3b298b24c819994e6a3f3faa65562e396e59475d094c2f08a1ab789e6f3fd67321e0ea7afcd584241d105de9ef98b8aee678fe954b971b17b9869b9ff09f9f923352f46a5d", 0x6c}, {&(0x7f0000000b40)="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", 0x1000}], 0x8, &(0x7f0000001bc0)=[{0x18, 0x110, 0x5, "914ff0"}, {0x80, 0x10c, 0x7, "180634635e35a4dc65b96665b738ef48468070ec1485df64201ce5b5679d7b652f58ea4b294024315145d08209a29b9524881415e3bb58ec89934fd8165aec8878e766c5d3073169a466b0c58e98f59f8b08adcc8dba3af6202ebeca4060ae08960103f46fb49905f4"}, {0x98, 0x10d, 0xb95, "314006349b05296c004e04c9c0492902bac771940127745251d26c8d8f433a31d606af8812a20e416e9fbd1e57f222e5b99eda3ef14e5fdd29e3e00bd3968b885ba04eb80a4c144e04b3593ad3837b19305e621c1e3bb0524ce796ff71eb5e074fd8ee664f68b01d8c0d7d2b6a2e23b2e369387924a7aca4e861cb63382ed2cbfc8bbfc388"}, {0xe8, 0x18f, 0x0, "a59256a44de98c9739a47916828f6ecdbf9a16c41b1e4805cf2e2fafa92ad61e6c5c707c736e1668bdc2624799bbf65948a1235829cf314afaa80e7ca8273e9f6149f1c14e3be4b744913801d819eff60f05bc6db1f349c7f98033f7a50c3c88db29112371e13fd67fa957624220ad38a48bd128723d4c9b863b8d420f1048869ed5415ec068858ad8c70f26acaeba605a9d0e63c3586e192f095739d2c673f756623757b7fda73989b65cfdf155c61d0d997bbb13745e1dcdde19dab2c917b3f4ce9617e11c9771d496a13ff447090e5d505e65ae"}, {0x110, 0x117, 0x9, "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"}, {0xe8, 0x103, 0x3, "b700a697971fe5a30e0b049066d3d9cd787ee5b4ec7d689b6a287137c0afb7a6c819b546380350466cef6c04f092f079e15837b9b66f7159cabaaf3389ae5fcd8f1a16cb9e6f71200591ab97fc80ff2127d4d12c065544fd6965687129baf3e943adb223597fc1630d25abec97906c78e961ef7c5f590fbc1f3da4db93fb160f427a508d8f65bd73fd13833d437339d813a5ff0af968953ee3ad299ab6de0d031cb540ce5923126c537dcdba942c80be43f5525c7dbe18c770d99afa24c7393bd6300024ff299e732f470c6226cd8ede99a2"}, {0x90, 0x199, 0xff, "4595125294e068324430ee4379fd598d84a00751823fcbf1a86aa8f42aed94270a6c42624abc8c78fc0e6918b1c33b2b2619d5a0ef58b76982025af29d2a90ca20b86e6a497a5af131467fd03c6bca1a2736832451de020f84a360d286aad19578ca0c5057ae65a0d3c90c83e7130ea0b925a66d074da51ee6"}], 0x4a0, 0x4040000}, 0x2}, {{&(0x7f00000020c0)=@hci={0x1f, r1, 0x1}, 0x80, &(0x7f0000004440)=[{&(0x7f0000002140)="c35d3490fc23c0fc49dd8a6b3c0a980defa933ffb038e43e77194d1351630046a6aab4d4b47c819bc280ea20d31e17", 0x2f}, {&(0x7f0000002180)="5dbfe6f27dd25474ab8661eb663b8d8050d579ef71d68e0c2c7b5ab7", 0x1c}, {&(0x7f00000021c0)="96a6da406ce72027f32a1aecccef974429aef069d7e3c2ebd9d46d64c38bb4cb464c09bf535c75e3eb89dd56dd252c67dca5373916d8edc160ee5950a270cbdac78b834120e0c539dd07775de0fd6114a2cb1d1e8944571c9f0f9de1d13701cc805024b87c9535304f5ec8f6ec905a11523be8ee54b68ca3cf9b3c2c80e1333ee619a28cf0a6", 0x86}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="933f6c673d298962d42c826d2b950d8230e5bac1e2ea4ed105e0bf5a34db76d5534e7aeada15725d225d03918b5957d16bdf60fbb217de4843922a330d6a2c1c9a789f12f9bf20669bbeb1a8fca3e594bb4369d6806d003eb2854d902d509eb18f89a657d9e5e3a2f0948c69c3dd88b90104a3a52d7a52edeedd154fd0576931d8a6ef5f479cf0db7d437c51dad051e3b82c9cd8841fd43de9dd7912", 0x9c}, {&(0x7f0000003340)}, {&(0x7f0000003380)="412eea9a1b0da954ad38cc2e86b94018c6a7a11f19a5954108f457fc244dd2ee75d716650d4c38a98c8b583cefbd163b3e1a54396a45e5ba86dbb09518b7b97377c800d29fc7db37ff2128a7ab4547e09f7a1299acd95f3c145494595a513e047550542f85832d3084d0e07ad8f26d8b815f075710078318af17f9c27c64657334be20d87e4cce6e5d0c42c8705420", 0x8f}, {&(0x7f0000003440)="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", 0x1000}], 0x8, &(0x7f00000044c0)=[{0x108, 0x10d, 0x1, "c5a5544c80d43fdf69def21e72147f57f1a0c5c1bc667a94455e89fb12614641a7fb136e0ac0ca968ca1e458bf6cae9f557563d0bb8a031f752067d6c8c361ad0fe69fa00727441f29bae081d2f8fc5ab9db6c294379e058692a5ad7bc3f78bbc8a6b03ecabda80a82d617c19960b0a605fbe4b7ad71c70b14b4025098690a75bb983f21d15382eab7f5f42b1856e2868cd4c61765884ab4c5d31c1e3b80e3d9f79cf5b97f49001975382e4ac3ebd185e0257e4427e0a2beda1cbc74dad41821e7ceabe706b3d517e364e8ceb69cfb7aa585dfba271cc76b32cb2b8095400c68cbac2548b4eb137888ba832b59a489b85d2cf2"}, {0x88, 0x10d, 0x8, "d22092f52ad5777abdc51b75305784c1b66e0bbe56be69d091fe79598b7ea487b6827121fd56885559e32a6e12aa1bb4a96b1a38a9dc8b70f68586267cce29b26a5dac50e512b288838253605687fd6f2f59d66dc413f71a2f61b0c3de8390257a7ba98f8af49752db6a3588c106fca56bb5133a36"}, {0x10, 0x1ff, 0x3}, {0xa8, 0x10e, 0x2, "5d8690ec672ff267ca0af43c4293d28a1f03146531d321dc375998d0eeb42a80b5aff2db4c5caf2771f9d5d0add618171958be5042fe657bad285dd1191a1cb936f1c9296c8c15b94043264729ade92ede341acbaac2935ab1e9579a56c49814559c082cf142fb3c60c7e354339fd217698ed069ae3f9a1168577962af477b0964c9d3f4504646fc8c88f58b35b45eb38f83"}], 0x248, 0x20040004}, 0x8001}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004740)="69aca946e85f6b3ac6", 0x9}, {&(0x7f0000004780)="8ac8b637e2964246d3fa4c729727a2f8257fb9b4167f1ac932ef2f444312c28dafaab225ee5ee34d9b12185f77ef6f401aa1d0a10239f9d39a2f4fb653b856fe7be64b010f06b1f7bb354a4c8ae4e698af2825f99e4353f67cc0ed354fe7de568d98fa334f534d153ed9076a11", 0x6d}], 0x2, &(0x7f0000004840)=[{0x110, 0x99, 0x3, "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"}, {0x50, 0x18c, 0x9, "3f1d8f1a51b6f11581939a3d08473908255180f821468e3d03d6fbcdc5b600f9f8cd067f4a464c7369f5bc3f0ce611b78c584c72f162264912b8ed9e580d9c9e"}, {0x50, 0x111, 0xd020, "940f8b3f1a234f24e5c0f2ac9108eaf4036d642e64050494baa0aecde7ed7e98752127578990031034222b6f59cdbbb856497a76f8b629e48640f6b7a6"}, {0x30, 0x0, 0x1, "5da98b7151d5baf1fc53c6acc45ed31c4b3fc6ba0c0c57678de10a2bb802"}, {0xd0, 0x13b, 0x2, "8cea4d8a5526febda0e7b4c4e16460d148b47cba4fc1042ef103315cf26b44a46c8ec75ce397edc1f4e5ed0a58e2e608908dce3268577ec522920bd3b6887c5feae95e3a84c747f6c5cdf2b1481009b4e6e611e020c9142550216538e7539307c22054266086a91901c4875061e0b35e65291ef16c4ad240c20c619f44a41e6273aab1c0a79fc006a1ff507cca091fbaca290825b743d20ad1cb55e75fcb4b84b36367cc8555a32b0a16c95c569b62ad5b5c930a5624057cbe010e32bd"}, {0xe0, 0x1ff, 0x80, "24d16e4885ccbb289d804526d714d5a91880f65b49f3d0451e551fa76d74c60a83ee011e52a1dbb70a1225d88573e67a9bb8d6c2914e2cc37fdc6990304aac6eb4f420049585555086abc419d39ac35d0b7e5763a6395df2caad72983719a3e511d97c1845f099b1daa9ee6bb7e865f4d3193b1c9295a68ca1fdba9f698fb92bf9b5d6bfb6b31ef217d316e131e99a1f48dba2bf7ad2817f2b6939a5742ef641d90a491e355818e72154d2daa794ba99864294714ac172e37bf655683a761c5180d75816df5d0e873f1a2450ca7adff2"}, {0x58, 0x0, 0x1, "983f08f9c41f525ff0256712858dd8b4e7c4a79c32690eecc52a1b5263a6532a9a89a16b51ef28f6ca72caa22975314b2f5104265d3b8e881170c756216a400ad3f0c46ba621"}, {0x58, 0x0, 0x40, "a5438d2d66729c8bd9f521c0060a1b0f16b9932522b36288366f37b376844d0fdf79c552751bc882b0d85adf00cc483cd4a89f14907a0487e33fa980273f39e90a"}], 0x440}, 0x9}, {{&(0x7f0000004c80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1=0xe0000001}, 0x4, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000006040)=[{&(0x7f0000004d00)="90c286", 0x3}, {&(0x7f0000004d40)="7b2b3ed46632279ecc768dc2a2e6df4405ebbf9b9c7aa8a3df257a79db4e4016e44ed42e5d082825365fd476c9466dc2c3e26b478f48d1a419", 0x39}, {&(0x7f0000004d80)="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", 0x1000}, {&(0x7f0000005d80)="0675345c7d7207959cb029b4996f10fb69a3a5a0112b6716331c25570307b37bedef4640cef6e09375d416ddece4c134c715b8a873224a945ec8792712635e7413f35ab5b2ee560bfe43ef136c1544d51ce2bab8e6d389075b8468e1fbf53c4792ea82a14ff5742064b168d969", 0x6d}, {&(0x7f0000005e00)="25cfecbe41f3576d82371913d35a3fc6d9d2662b2d80cf1770a4b325da0b6635122111fcf1e2caa6f305db533c6caf1687d3565ce7caa19c396645c77bb6d9dd3921905923c0a83c5b295149562da087d1cc9e8a509d019a3585618034baa04068a0d1c4554fd5809d8234c62dd17ef96a626639f640956018a78869d57f43949c2ed760deef7c4a1c4efd4416a72f53", 0x90}, {&(0x7f0000005ec0)="faa50aa58b722f960805d2b917ee6e518d7ca1e1923cb995e9fa9b61633364b4d48389fd15a028b1d9259094d12eb367a9d64863882282a66a466002cc747c51efd7601cac9d945d960aec89784b031b38ecd46f40d2d0bea02be66cb229948ad4ddfa5224d8c318c280a03f7398f09010f8bc523b84a60471f6ed59383014160902f78dff2299c560c15515c5caf58fe1f0d12689d02dc58aa053c746703864c3f8bc418460d9398a", 0xa9}, {&(0x7f0000005f80)="da70ea70be5f5c35b3599d0e827a969878bd1085a84e4498806ec347b8d1aa399fa17be2624e78d0b0fa2c35c161bd554a80dabe9513fb35b58367961050f1bf9ea406987444c567be01253cbccdae2a3f29cc32ad080556aad298a7400b8c67565366ff863f040e8df83d7f3a3f856e0a27a585705ffff120d2fa4209a98d4bafa37c02e94135ba1dc8ddd662c2b95a3a6edd71f1b6644ecd476066eb86ec5be6", 0xa1}], 0x7, 0x0, 0x0, 0x40040}, 0x5}], 0x5, 0x1) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x2000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b8d201c1f66a0"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 549.670582] FAULT_INJECTION: forcing a failure. [ 549.670582] name failslab, interval 1, probability 0, space 0, times 0 [ 549.682175] CPU: 0 PID: 3649 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 549.689228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.698592] Call Trace: [ 549.701200] dump_stack+0x1c9/0x2b4 [ 549.704849] ? dump_stack_print_info.cold.2+0x52/0x52 [ 549.710062] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 549.714939] should_fail.cold.4+0xa/0x1a [ 549.719025] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 549.724149] ? kasan_kmalloc+0xc4/0xe0 [ 549.728058] ? kasan_slab_alloc+0x12/0x20 [ 549.732212] ? kmem_cache_alloc+0x12e/0x760 [ 549.736536] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.741476] ? kvm_mmu_load+0x21/0x10e0 [ 549.745460] ? vcpu_enter_guest+0x3aa6/0x6090 [ 549.750567] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.755596] ? graph_lock+0x170/0x170 [ 549.759400] ? do_syscall_64+0x1b9/0x820 [ 549.763481] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 549.765374] binder: undelivered transaction 444, put_user failed [ 549.768877] ? find_held_lock+0x36/0x1c0 [ 549.768904] ? __lock_is_held+0xb5/0x140 [ 549.768939] ? check_same_owner+0x340/0x340 [ 549.787541] ? rcu_note_context_switch+0x730/0x730 [ 549.792492] __should_failslab+0x124/0x180 [ 549.796745] should_failslab+0x9/0x14 [ 549.800541] kmem_cache_alloc+0x2af/0x760 [ 549.804699] ? alloc_pages_current+0x114/0x210 [ 549.809272] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.814192] mmu_topup_memory_caches+0x2fa/0x3a0 [ 549.818936] ? kvm_apic_has_interrupt+0xe9/0x230 [ 549.823685] kvm_mmu_load+0x21/0x10e0 [ 549.827473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.833003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 549.838539] vcpu_enter_guest+0x3aa6/0x6090 [ 549.842873] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 549.847474] ? kvm_set_msr_common+0x26a0/0x26a0 [ 549.852138] ? perf_trace_lock+0x920/0x920 [ 549.856369] ? vmx_vcpu_reset+0x1040/0x1040 [ 549.860679] ? graph_lock+0x170/0x170 [ 549.864482] ? __lock_is_held+0xb5/0x140 [ 549.868536] ? lock_acquire+0x1e4/0x540 [ 549.880312] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 549.885323] ? lock_release+0xa30/0xa30 [ 549.889292] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 549.894568] ? kvm_arch_dev_ioctl+0x610/0x610 [ 549.899053] ? preempt_notifier_dec+0x20/0x20 [ 549.903543] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.908461] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 549.913473] kvm_vcpu_ioctl+0x7b8/0x1300 [ 549.917523] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 549.923230] ? find_held_lock+0x36/0x1c0 [ 549.927288] ? lock_downgrade+0x8f0/0x8f0 [ 549.931425] ? rcu_is_watching+0x8c/0x150 [ 549.935560] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 549.939965] ? __fget+0x414/0x670 [ 549.943407] ? match_held_lock+0x821/0x8d0 [ 549.947631] ? expand_files.part.8+0x9c0/0x9c0 [ 549.952202] ? kasan_check_write+0x14/0x20 [ 549.956433] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 549.961364] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 549.967062] do_vfs_ioctl+0x1de/0x1720 [ 549.970942] ? ioctl_preallocate+0x300/0x300 [ 549.975349] ? __fget_light+0x2f7/0x440 [ 549.979312] ? fget_raw+0x20/0x20 [ 549.982764] ? __sb_end_write+0xac/0xe0 [ 549.986732] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 549.992257] ? fput+0x130/0x1a0 [ 549.995523] ? ksys_write+0x1ae/0x260 [ 549.999314] ? security_file_ioctl+0x94/0xc0 [ 550.003716] ksys_ioctl+0xa9/0xd0 [ 550.007159] __x64_sys_ioctl+0x73/0xb0 [ 550.011555] do_syscall_64+0x1b9/0x820 [ 550.015446] ? syscall_slow_exit_work+0x500/0x500 [ 550.020281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 550.025211] ? syscall_return_slowpath+0x31d/0x5e0 [ 550.030131] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 550.035484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.040317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 550.045492] RIP: 0033:0x455b29 [ 550.048664] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 550.067969] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:27:10 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r3 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) sendto$inet(r0, &(0x7f0000000200), 0x322, 0x0, &(0x7f0000dfcff0)={0x2, 0x0, @loopback=0x7f000001}, 0xffffff6e) 13:27:10 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) [ 550.075677] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 550.082931] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 550.090185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 550.097441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 550.104705] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000061 [ 550.117244] binder: 3618:3620 ioctl c0306201 200000c0 returned -14 13:27:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae", 0x13, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) [ 550.163543] binder: BINDER_SET_CONTEXT_MGR already set [ 550.173652] binder: 3618:3620 ioctl 40046207 0 returned -16 [ 550.185578] binder: 3618:3620 ERROR: BC_REGISTER_LOOPER called without request [ 550.241229] binder: undelivered TRANSACTION_COMPLETE 13:27:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff0f000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffdcffffffff08004500001c0000000000119078ac14ffbbe00000010000000000089078"], 0x0) 13:27:10 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl(r0, 0x4000008910, &(0x7f0000000080)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0) close(r1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 13:27:10 executing program 4 (fault-call:7 fault-nth:98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x3000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:10 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)=@ioapic={0x5000, 0x400, 0x1f, 0x4000000, 0x0, [{0x10001, 0xfffffffffffffffb, 0x3f, [], 0x4}, {0x279a, 0x80, 0x0, [], 0x101}, {0xfffffffffffffffa, 0x0, 0x1, [], 0x8}, {0x0, 0x8, 0xf9, [], 0x7ff}, {0x1, 0xfffffffffffffff7, 0xfffffffffffffffc, [], 0x81}, {0x5, 0x9, 0x7f, [], 0x101}, {0x2, 0x3, 0x3, [], 0x9}, {0x400, 0x0, 0x0, [], 0x1}, {0x3ff, 0x9, 0x4, [], 0x100000000}, {0x9, 0x2, 0x2b, [], 0x9}, {0x8, 0x1ff, 0x1000, [], 0x9}, {0x4, 0x3, 0x4000, [], 0x1}, {0x3, 0x8, 0x8, [], 0x1}, {0x0, 0x4, 0x2, [], 0x2}, {0x1, 0x5a66, 0x6, [], 0xe6}, {0x0, 0xffffffffffff41d9, 0x3, [], 0x3ff}, {0x80, 0x0, 0x5, [], 0xfff}, {0x0, 0x1, 0xab87, [], 0x2}, {0x1, 0x100, 0x6, [], 0x8}, {0x4, 0x1, 0x101, [], 0x1}, {0x924, 0x401, 0x80000001}, {0x9, 0x7d69, 0x9, [], 0x9}, {0x0, 0x8, 0x8, [], 0x8}, {0x2b14, 0x0, 0xdfa, [], 0x158}]}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xc2) sendfile(r1, r0, &(0x7f0000000000), 0xfffffffffffffffe) getpeername$ax25(r1, &(0x7f0000000300), &(0x7f0000000340)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@broadcast=0xffffffff, 0x4e23, 0x3, 0x4e21, 0xfffffffffffff7f8, 0xa, 0xa0, 0x80, 0x7f, r3, r4}, {0x4, 0xfffffffffffffff7, 0x200, 0xbbba, 0x9, 0x5, 0x7, 0xffffffff}, {0x62, 0x7, 0x0, 0x3}, 0x800, 0x6e6bbd, 0x1, 0x1, 0x2, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d6, 0x2b}, 0x2, @in=@loopback=0x7f000001, 0x0, 0x4, 0x0, 0xfffffffffffffe00, 0xffffffffffffa049, 0x7, 0x3}}, 0xe8) [ 550.649368] binder: 3684:3687 ERROR: BC_REGISTER_LOOPER called without request [ 550.700048] FAULT_INJECTION: forcing a failure. [ 550.700048] name failslab, interval 1, probability 0, space 0, times 0 [ 550.711423] CPU: 1 PID: 3686 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 550.718368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.727735] Call Trace: [ 550.730346] dump_stack+0x1c9/0x2b4 [ 550.733992] ? dump_stack_print_info.cold.2+0x52/0x52 [ 550.739316] ? should_fail+0x212/0xbed [ 550.743251] should_fail.cold.4+0xa/0x1a [ 550.747340] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 550.752460] ? kasan_kmalloc+0xc4/0xe0 [ 550.756358] ? kasan_slab_alloc+0x12/0x20 [ 550.760496] ? kmem_cache_alloc+0x12e/0x760 [ 550.764809] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 550.769726] ? kvm_mmu_load+0x21/0x10e0 [ 550.773687] ? vcpu_enter_guest+0x3aa6/0x6090 [ 550.778166] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 550.783185] ? graph_lock+0x170/0x170 [ 550.786973] ? do_syscall_64+0x1b9/0x820 [ 550.791028] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 550.796394] ? find_held_lock+0x36/0x1c0 [ 550.800445] ? __lock_is_held+0xb5/0x140 [ 550.804507] ? check_same_owner+0x340/0x340 [ 550.808828] ? rcu_note_context_switch+0x730/0x730 [ 550.813765] __should_failslab+0x124/0x180 [ 550.817994] should_failslab+0x9/0x14 [ 550.821785] kmem_cache_alloc+0x2af/0x760 [ 550.825921] ? alloc_pages_current+0x114/0x210 [ 550.830496] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 550.835413] mmu_topup_memory_caches+0x2fa/0x3a0 [ 550.840161] ? kvm_apic_has_interrupt+0xe9/0x230 [ 550.844914] kvm_mmu_load+0x21/0x10e0 [ 550.848703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 550.854230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 550.859763] vcpu_enter_guest+0x3aa6/0x6090 [ 550.864084] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 550.868314] ? kvm_set_msr_common+0x26a0/0x26a0 [ 550.872974] ? zap_class+0x740/0x740 [ 550.876677] ? perf_trace_lock+0x920/0x920 [ 550.880913] ? __lock_acquire+0x7fc/0x5020 [ 550.885139] ? vmx_vcpu_reset+0x1040/0x1040 [ 550.889445] ? graph_lock+0x170/0x170 [ 550.893247] ? __lock_is_held+0xb5/0x140 [ 550.897297] ? lock_acquire+0x1e4/0x540 [ 550.901265] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 550.906273] ? lock_release+0xa30/0xa30 [ 550.910247] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 550.915520] ? kvm_arch_dev_ioctl+0x610/0x610 [ 550.920001] ? preempt_notifier_dec+0x20/0x20 [ 550.924496] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 550.929350] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 550.934365] kvm_vcpu_ioctl+0x7b8/0x1300 [ 550.938417] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 550.944122] ? find_held_lock+0x36/0x1c0 [ 550.948177] ? lock_downgrade+0x8f0/0x8f0 [ 550.952316] ? rcu_is_watching+0x8c/0x150 [ 550.956451] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 550.960854] ? __fget+0x414/0x670 [ 550.964299] ? match_held_lock+0x821/0x8d0 [ 550.968524] ? expand_files.part.8+0x9c0/0x9c0 [ 550.973094] ? kasan_check_write+0x14/0x20 [ 550.977314] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 550.982240] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 550.987937] do_vfs_ioctl+0x1de/0x1720 [ 550.991815] ? ioctl_preallocate+0x300/0x300 [ 550.996211] ? __fget_light+0x2f7/0x440 [ 551.000177] ? fget_raw+0x20/0x20 [ 551.003617] ? __sb_end_write+0xac/0xe0 [ 551.007582] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 551.013632] ? fput+0x130/0x1a0 [ 551.016898] ? ksys_write+0x1ae/0x260 [ 551.020691] ? security_file_ioctl+0x94/0xc0 [ 551.025088] ksys_ioctl+0xa9/0xd0 [ 551.028538] __x64_sys_ioctl+0x73/0xb0 [ 551.032417] do_syscall_64+0x1b9/0x820 [ 551.036288] ? finish_task_switch+0x1d2/0x850 [ 551.040775] ? syscall_return_slowpath+0x5e0/0x5e0 [ 551.045691] ? syscall_return_slowpath+0x31d/0x5e0 [ 551.050612] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 551.055968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 551.060819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.066004] RIP: 0033:0x455b29 [ 551.069184] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 551.089043] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:27:11 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl(r0, 0x4000008910, &(0x7f0000000080)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0) close(r1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 13:27:11 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$int_out(r0, 0xc0385720, &(0x7f0000000100)) [ 551.096750] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 551.104009] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 551.111269] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 551.118525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 551.125791] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000062 13:27:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) fdatasync(r0) [ 551.212538] binder: 3703:3707 ioctl c0385720 20000100 returned -22 13:27:11 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:11 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) socketpair(0x8, 0x5, 0x100000001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f0000000140), 0x4) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x2, 0x8}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x20, &(0x7f0000000440)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0xc0481273, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000001500), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 13:27:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000580)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x4a, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="440f20c0350e000000440f22c00f01cfc744240069000000c7442402fcffffffff2c24c4a279355629b9fc0b00000f32440f2391c4e3157d790000f24581c106000000c442e2f7fb470f35", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) socketpair$inet(0x2, 0x80000, 0x7ff, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae", 0x13, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:11 executing program 4 (fault-call:7 fault-nth:99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 551.448557] binder: undelivered transaction 446, put_user failed [ 551.458808] binder: 3684:3687 ioctl c0306201 200000c0 returned -14 [ 551.485900] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 551.493480] FAT-fs (loop6): Filesystem has been set read-only [ 551.493904] binder: BINDER_SET_CONTEXT_MGR already set 13:27:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffbfff00020000000000000000000000119078ac14ffbbe00000010000000000089078"], 0x0) 13:27:11 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x200000000000018e, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000003ff6)="59814589", 0x1, 0xfffffffffffffe74, &(0x7f000000cf3d)=""/195, 0x0, 0x1}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) [ 551.545475] binder: 3684:3687 ioctl 40046207 0 returned -16 [ 551.556415] binder: 3684:3687 ERROR: BC_REGISTER_LOOPER called without request [ 551.621801] FAULT_INJECTION: forcing a failure. [ 551.621801] name failslab, interval 1, probability 0, space 0, times 0 [ 551.633280] CPU: 0 PID: 3738 Comm: syz-executor4 Not tainted 4.17.0+ #102 [ 551.640226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.649588] Call Trace: [ 551.652804] dump_stack+0x1c9/0x2b4 [ 551.656457] ? dump_stack_print_info.cold.2+0x52/0x52 [ 551.661660] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 551.666525] should_fail.cold.4+0xa/0x1a [ 551.670584] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 551.675679] ? kasan_kmalloc+0xc4/0xe0 [ 551.679555] ? kasan_slab_alloc+0x12/0x20 [ 551.683692] ? kmem_cache_alloc+0x12e/0x760 [ 551.688001] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 551.692922] ? kvm_mmu_load+0x21/0x10e0 [ 551.696892] ? vcpu_enter_guest+0x3aa6/0x6090 [ 551.701372] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 551.706379] ? graph_lock+0x170/0x170 [ 551.710165] ? do_syscall_64+0x1b9/0x820 [ 551.714305] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.719666] ? find_held_lock+0x36/0x1c0 [ 551.723732] ? __lock_is_held+0xb5/0x140 [ 551.727798] ? check_same_owner+0x340/0x340 [ 551.732122] ? rcu_note_context_switch+0x730/0x730 [ 551.737049] __should_failslab+0x124/0x180 [ 551.741277] should_failslab+0x9/0x14 [ 551.745067] kmem_cache_alloc+0x2af/0x760 [ 551.749205] ? alloc_pages_current+0x114/0x210 [ 551.753778] ? mmu_topup_memory_caches+0x2fa/0x3a0 [ 551.758706] mmu_topup_memory_caches+0x2fa/0x3a0 [ 551.763460] ? kvm_apic_has_interrupt+0xe9/0x230 [ 551.768212] kvm_mmu_load+0x21/0x10e0 [ 551.772005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 551.777638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 551.783260] vcpu_enter_guest+0x3aa6/0x6090 [ 551.787574] ? kvm_vcpu_ioctl+0x1ea/0x1300 [ 551.791807] ? kvm_set_msr_common+0x26a0/0x26a0 [ 551.796471] ? zap_class+0x740/0x740 [ 551.800175] ? perf_trace_lock+0x920/0x920 [ 551.804398] ? __lock_acquire+0x7fc/0x5020 [ 551.808633] ? vmx_vcpu_reset+0x1040/0x1040 [ 551.812944] ? graph_lock+0x170/0x170 [ 551.816751] ? __lock_is_held+0xb5/0x140 [ 551.820825] ? lock_acquire+0x1e4/0x540 [ 551.824790] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 551.829807] ? lock_release+0xa30/0xa30 [ 551.833772] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 551.839042] ? kvm_arch_dev_ioctl+0x610/0x610 [ 551.843525] ? preempt_notifier_dec+0x20/0x20 [ 551.848214] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 551.853045] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 551.858062] kvm_vcpu_ioctl+0x7b8/0x1300 [ 551.862115] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 551.867828] ? find_held_lock+0x36/0x1c0 [ 551.871892] ? lock_downgrade+0x8f0/0x8f0 [ 551.876041] ? rcu_is_watching+0x8c/0x150 [ 551.880180] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 551.884588] ? __fget+0x414/0x670 [ 551.888122] ? match_held_lock+0x821/0x8d0 [ 551.892359] ? expand_files.part.8+0x9c0/0x9c0 [ 551.896930] ? kasan_check_write+0x14/0x20 [ 551.901152] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 551.906079] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 551.911810] do_vfs_ioctl+0x1de/0x1720 [ 551.915697] ? ioctl_preallocate+0x300/0x300 [ 551.920098] ? __fget_light+0x2f7/0x440 [ 551.924066] ? fget_raw+0x20/0x20 [ 551.927533] ? __sb_end_write+0xac/0xe0 [ 551.931508] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 551.937040] ? fput+0x130/0x1a0 [ 551.940312] ? ksys_write+0x1ae/0x260 [ 551.944113] ? security_file_ioctl+0x94/0xc0 [ 551.948524] ksys_ioctl+0xa9/0xd0 [ 551.951976] __x64_sys_ioctl+0x73/0xb0 [ 551.955854] do_syscall_64+0x1b9/0x820 [ 551.959732] ? syscall_slow_exit_work+0x500/0x500 [ 551.964575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 551.969498] ? syscall_return_slowpath+0x31d/0x5e0 [ 551.974430] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 551.979805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 551.984644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.989825] RIP: 0033:0x455b29 [ 551.992998] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 552.012375] RSP: 002b:00007fd764279c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.020087] RAX: ffffffffffffffda RBX: 00007fd76427a6d4 RCX: 0000000000455b29 [ 552.027357] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000015 [ 552.034616] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 552.041879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 552.049135] R13: 00000000004bdd01 R14: 00000000004cbc38 R15: 0000000000000063 [ 552.113215] binder: undelivered TRANSACTION_COMPLETE 13:27:12 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x51aa6cfa3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:12 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={"66696c7465720200", 0x4}, 0x68) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1}, &(0x7f0000000340)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @remote}, &(0x7f00000003c0)=0xc) accept4$packet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x14, 0x80800) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000580)={@mcast2, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @loopback, @multicast2}, &(0x7f00000007c0)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x244, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r5}, {0x1a4, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xe30000}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x40040) 13:27:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000119078ac14ffbbe00000010000000000089078cefa7a1b4ee3d21b6cf829cfb2761ad89380613f87d4b9733adee9ea96a3bf7d94cf71b59e0c690b1c8d1a1e7cde8fcb8cbc5da26cc69617b77d5b4100ab2b277a01c0eb53ffaf09e2e072668f38f0747ffa61cba40478657b4d488d7cf8a0c86bd1e9e73bc8bc8092fccf9205de005c776c71648c5d6fb42cdaeed12b8f085b3b8c82844964041d63edc3062cc6ffe7"], 0x0) r1 = dup(r0) r2 = accept4$ax25(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000200)=0x7ff, 0x4) 13:27:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:12 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') 13:27:12 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) times(&(0x7f00000000c0)) io_setup(0x2, &(0x7f0000000040)=0x0) io_destroy(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x19) recvfrom$inet(r1, &(0x7f0000000100)=""/168, 0xa8, 0x40012000, &(0x7f00000001c0)={0x2, 0x10001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) [ 552.416337] binder: 3767:3768 ERROR: BC_REGISTER_LOOPER called without request [ 552.424729] sched: DL replenish lagged too much 13:27:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae", 0x13, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1151}, {r1, 0x250a}], 0x2, 0x4960e0f) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1\x00') 13:27:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0ed8f779fe5eb297", @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000340)=@hci={0x0, 0x0}, &(0x7f0000000140)=0x80) sendto$packet(r1, &(0x7f0000000200)="a003642a8b4ed394681a9fc6a6b0bbcfbef0c0f03023ba13b85ebcad6fab47c4a9febc72b2087674ab4faf86fa7d3e17b5ed29c6a0f61c48fea276341b4d65ea6d362fbd85f3a15a23ed952aae42f95937484ec5e9d103e049e8cb75a269f6534acca331975c577c79c5dd71145fb4b2cbe4c08fb7bd17457f2a5ee8ad44d6a022ac6acdcbfc1b789340624ac70c2fecb398fedb7785b48127c33a70625482acdd95102cbda11a37403ce8b0e63a764bcd5d2edc24a2c6a854ba351309017e6e401f01ec19", 0xc5, 0x15, &(0x7f00000003c0)={0x11, 0x1f, r2, 0x1, 0xfffffffffffff12f, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xa0, 0x4040) openat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000400)) socket$inet_udplite(0x2, 0x2, 0x88) [ 552.479800] kvm: pic: non byte read [ 552.488936] kvm: pic: non byte read [ 552.492944] kvm: pic: non byte read [ 552.498349] kvm: pic: non byte read 13:27:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 13:27:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") get_robust_list(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)}, &(0x7f0000000240)=0x18) ioctl$DRM_IOCTL_RES_CTX(r0, 0x40086607, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x5}) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000280)="0a17a086dbe725b8ffec0ec5faaeafee1aeb138581bab380aa9c320c87c327983b26c0336062e75ee6116de5332e1d7c01b7b7bee102f34d094ddc479864ad3ed094949849bce6b953f1f36b5f17e70f5794bb3d2cd60b595e9a39838f8491cc1bd3ec512904914c88ff1436b7657fa7899586683ed3e1a04f6e4d4ba1806ce619c0eac91a26", 0x86}, {&(0x7f0000000340)="74689ab8480e4a09b07859870655062cf5081ca5505abb4fe721d3b7dccaf15ec48d912bc21feb1bfca5ef9ff68c8bb3854385103c15fcc7a17ad00326a06343ab8e35a9f7b35ac232b30f87b4b77a058937c255cc569f25267625baea3349acabd0c15e72a8b9e8b77e4b760cc5566e54484efd3ff8ef1119344790c16c88f36844991f08b9bdddd5deac09a07aadcb69bbbbccb5ba9fe012d4fecce33e68232cf260dc0a4436d9a0b19a6b8210e8e2dc252823d25df5be731e00b56157360e9a6e38497dc721323271eeb886dfe794fb4d4b2ab3addcd1e05b740525f74cadc254ed835032b5292872", 0xea}, {&(0x7f0000000440)="170775a5ac3db1df1b78f53664a0db06939cbc8fe4250f70f80c4d38e234387d097d71c0f6a3544e5047e9c28f64f9804b41c5688177b5f93b608779f1015913f3c47ad7993bd85f89f1fc10bec24d44592ca095b504b1c62f3e021587a938af28adc717e8af", 0x66}, {&(0x7f00000004c0)="6b4c8dc9c19bf303350ad644625f57e17c5d5d211be7bc828aaf953d3dbce8b729e419e1a17f6ae569cbc27de8e3191b11ffa4c5b1cd8dec67cf062299094498b61fa9a7b5cc57aa675211bf50871f32feaf495784438c842e108f93010a4b4d46643574ad3a713d5327f143cad9fe4f4b44cf4b408c", 0x76}, {&(0x7f0000000540)="eca6053ee219738eddcf4e2c4ad2f7ca9fac97e681091345d9639cf7bcf4e1f6c0d878f64af561754777caf14fe9a5b0c8ff655cb71922e40d38f5f7ee1b5fbd0886e9c5ddc16da7d4a54a1ecc77cd823aef36c5b2ea0eb366375641574aa22556579a2403bafb447ecc2ca24cdd538318851102d6ad7190c4099885a5452a8b173bccef04025053479c241bd6727253d621983c7f8367ed84b6563d411a23f9583b37cb4d7f04a73c38ad44", 0xac}, {&(0x7f0000000600)="9e994c7b0e59cbcfe8aad715001686901e6171f57e48c06ef356310dc7453f82d0b48dca13b2b1cfb33c4b10e2dc5bc5540c61e2589af712dceb899dd56fcea9fe77b778bc3a64c368bef5004dedf3f8b17d03a995458b18d73e483a56e87f881c9118759a6e827c397b489aac230af7db98444d7701a13dd6c9007844aecbbac1c53528fba5e8aad16bb97e516ba2ea5428c0b1e24181e03cf54203f76815efd1c0143e958433160bea6ef6d87c90bb2f546121843213fd14c2614309379dcc50c71da3045d79f13e4b7634f655159b446b8a8e2bbe3f888d8c08ba40fd25814bbe28d4cab1151373485f95d407", 0xee}], 0x6, 0x1) 13:27:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x4) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x1, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x2, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}]}, 0x190) 13:27:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 13:27:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x80000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10) ioctl(r0, 0x4000008912, &(0x7f0000000300)="295ee1311f16f477671070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001740), &(0x7f0000001780), &(0x7f0000000280), &(0x7f0000001700)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x200000) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)=0x3, 0x4) 13:27:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000000, 0x80000) getsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x11) 13:27:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8004000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:13 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000100)=0x5) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x72) r1 = getpid() sched_getscheduler(r1) [ 553.211137] binder: undelivered transaction 448, put_user failed [ 553.218353] binder: 3767:3768 ioctl c0306201 200000c0 returned -14 [ 553.227463] binder: BINDER_SET_CONTEXT_MGR already set [ 553.233225] binder: 3767:3768 ioctl 40046207 0 returned -16 [ 553.239209] binder: 3767:3768 ERROR: BC_REGISTER_LOOPER called without request 13:27:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x7400000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 13:27:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f0000000040)="7e289a3ced05b2e6459d0d7583601f973378c714ef9bf24262f062a143ea560dc888c06fd578") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x1000004000000034, &(0x7f0000000140), 0x4) [ 553.266757] binder: undelivered TRANSACTION_COMPLETE [ 553.377952] binder: 3854:3855 ERROR: BC_REGISTER_LOOPER called without request 13:27:13 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') 13:27:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x0, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x51aa6cfa3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:13 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009374, &(0x7f0000000080)="0100000000000000180400000001000000555d040f45426d0270ec78dfd849832f") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x8000, 0xfffffffffffffe00}, 0x10) 13:27:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x88b}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x9, 0xfffffffffffffffd, 0x6, 0x9, 0x1c0000000000000}, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000199078ac14ffbbe00000010000000000089078"], 0x0) 13:27:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 13:27:13 executing program 3: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f00000007c0)='./file0/file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000880)='./file0/file1\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000780)='./file0/file0\x00', &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000200)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x8, 0x1, 0x100}, 0x8, 0xfff}) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f0000753000)='ext4\x00', 0x3002480, &(0x7f0000000700)) [ 553.679576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:27:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 13:27:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x43630000004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) getsockname$ax25(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 554.168668] binder: undelivered transaction 450, put_user failed [ 554.175315] binder: 3854:3855 ioctl c0306201 200000c0 returned -14 [ 554.211151] binder: BINDER_SET_CONTEXT_MGR already set [ 554.216700] binder: 3854:3855 ioctl 40046207 0 returned -16 [ 554.222913] binder: 3854:3855 ERROR: BC_REGISTER_LOOPER called without request [ 554.259352] binder: undelivered TRANSACTION_COMPLETE 13:27:14 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5400000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, &(0x7f0000000040)=""/176, 0xb0, 0x10020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x80) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:14 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x42200, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0xffffffffffffffff) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ntfs\x00', 0x3, &(0x7f0000000980)) fcntl$setpipe(r0, 0x407, 0x1f) chmod(&(0x7f00000001c0)='./file0\x00', 0x84) 13:27:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 13:27:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x51aa6cfa3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x13000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 554.364074] binder: 3921:3928 ERROR: BC_REGISTER_LOOPER called without request 13:27:14 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') 13:27:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x0, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 13:27:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235008000000f30b9b8080000b8c897c43eba000000000f30f2420f330f090f00e466b83b010f00d00f20d835080000000f22d8b9800000c00f3235001000000f30660f6138c403295e7bf027", 0x53}], 0x1, 0x0, &(0x7f0000000200), 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x503000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:27:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 13:27:14 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000f0004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) getegid() 13:27:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x51aa6cfa3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 554.934798] netlink: 'syz-executor3': attribute type 15 has an invalid length. [ 554.969829] netlink: 'syz-executor3': attribute type 15 has an invalid length. 13:27:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000280)="22ec8267e12d1a2b20ca1c78fba84313f044666aac0680ed43f8389b3b82f92545200315adc82f93e40cbd4d316bc31457af9ebc66c71dea455392da96cdbd7e6d293ec625445cae71f24bf1391f928eb1ea7bf9c24c9c800c7e94cb33bb99b089be2b028b7b99c005aaa9422d09b3e2923dadbb327e4d4fc188c07e0c16a2aae5241294c09f08b1de9b4ffc897135518078394dc4b956590983406a064676b23ffff34295719ee287823f58dc3a25f8519325cd63fe3b54044c619bfc5b5a223f9099195522b8bc7f24572f6f329e494a8c39da2145ebef", 0xd8, 0x20004004, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x0) 13:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xc0045877, 0x0) 13:27:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4002, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 555.163526] binder: undelivered transaction 452, put_user failed [ 555.179106] binder: 3921:3928 ioctl c0306201 200000c0 returned -14 13:27:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000, &(0x7f00000000c0)="295ed277a4200100360070") r1 = socket(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000004f40), &(0x7f0000000000)=0x4) r2 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r2, 0x22, &(0x7f0000000040)={0x24, 0x9, 0xa4d}) [ 555.237511] binder: BINDER_SET_CONTEXT_MGR already set [ 555.271298] binder: 3921:3972 ioctl 40046207 0 returned -16 [ 555.278952] binder: 3921:3928 ERROR: BC_REGISTER_LOOPER called without request [ 555.318340] binder_alloc: 3921: binder_alloc_buf, no vma [ 555.323980] binder: 3921:3928 transaction failed 29189/-3, size 0-0 line 2967 [ 555.428660] binder: undelivered TRANSACTION_ERROR: 29189 [ 555.436600] binder: undelivered TRANSACTION_COMPLETE 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) 13:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 13:27:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x200000) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000000c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x1ff, 0x372a4449, 0x2, @random="90ac152e1987", 'veth0_to_bridge\x00'}) 13:27:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x600, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 555.567892] binder: 3999:4003 ERROR: BC_REGISTER_LOOPER called without request 13:27:15 executing program 6: r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="3b240bf38285dc40891982168df3ae96b2feebd50da1dda0d316389e96ca7525e9", 0x21}, {&(0x7f0000000100)="87f618a1d89e1c2940d17ec3255a888a00093fa22326247d5a76ba9810c80a4acd899e6491f8bdca53b2186d087f25fcde1be18664e6f9e40109a323642b81b8d01fd70f7d4cf7fa9dcfa80bea8029cefa488de78ceebaef106995566afc054e432c6e7bab10", 0x66}], 0x2, 0x0, 0x0, 0x10}, 0x4000) 13:27:15 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) close(r1) 13:27:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x0, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:15 executing program 3: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1b}, @loopback=0x7f000001, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x9, 0x6, 0x21e, 0x40, 0x400, 0x1}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) 13:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) pwrite64(r0, &(0x7f0000000200)="1149f6c43a14e6c7335aa58ccba49d74d73ae19c44af9e5f081c3347980d9403edfcb03ca1fb521c62606df53def458ec4da4a790527fa58d0ba3256f1a5ab40047cb901ce3bc461f1876e26d7d8d6e63e883d746de39861e99f2ab5e71fde1ab187b4ab489ac19aabc8a4d847c89cea78f5cb93e8f4e3f6db2d042145f5c5dc1e20164067e6fa96a40f2bbad3163ba6de12ef1d935263049c7e85d7812b3af6330763a72baa5917cdcb03f51572cb3f909a24bd90b237a83c67d7d20814fd0e8108070f47d76068cd3e52e5d8b75e316ac74a9aa8e659c6ff2a30ab31544fbe9252b3023d229c", 0xe7, 0x0) 13:27:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0xffffffff80000001, 0x2, 0x0, 0x0, [{r0, 0x0, 0x2}, {r0, 0x0, 0x9}]}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r1, 0x400, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 13:27:15 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x80007, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/69, 0x45}], 0x1) 13:27:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 13:27:16 executing program 3: stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)="650300", &(0x7f0000000140)='/\x00', 0x3, 0x0, &(0x7f0000000300), 0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f626c6f636b5f76616e69646974792c2051c2f80eeb91bc27b4ff1804b64b0fb413d4ac605c7b2496890dc09e81023a07257d56902bd1f97246017259c9be5c5c331329d0b01278cb4a45b4a4adc06f25acbb85cbeb5e368924080385ba0fd413540bf393757e4bd1948790fc2cc1615a38621d3af5c032ba0723392092f7e948d253db147cfde0fd6e3d36a550e177a2aad3949695c1f3973dd382f17d5a3ba181e7cee7f4f998c2125e4c5c874fde038d8ae623027f01b38cc72407a1eb7367d2147b16eda96624e2a23121e346e7b81b269eb99c8fda1148b11e7ea344def546547b9bcd56"]) r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x80400) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) socket(0x10, 0x48354e8a5402d32, 0x1f) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000004c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/stat\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x20000, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x70, 0x1, 0x401, 0x7, 0x8, 0x0, 0xfffffffffffffffe, 0x149, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x80, 0x81, 0x8, 0x8, 0x3, 0x1f9e, 0x2, 0x1, 0x55dc00db, 0x100007, 0x1, 0x811, 0xa, 0x7fffffff, 0xffff, 0x7f, 0x40f1, 0x4, 0x800, 0x8000, 0x40, 0xfff, 0x5c, 0x2, 0xfffffffffffffffc, 0x6a, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x1f897e7a, 0x800, 0x2, 0x9, 0x1ff, 0x2}, r1, 0x400000000001, r2, 0x0) mq_getsetattr(r0, &(0x7f0000000400)={0x100000001, 0x0, 0x4, 0x8000, 0x9, 0x2, 0x40, 0x2}, 0x0) 13:27:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 13:27:16 executing program 2: r0 = memfd_create(&(0x7f0000000240)='cpuset,#ppp1\x00', 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000280)=""/74) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) socket(0x3, 0x800, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x10001, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x100000000, 0xffffffffffff4758, 0xffffffff, 0x41}, &(0x7f0000000100)=0x98) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x9, 0xd9, 0x8000000000000000, 0x100, 0x1ff}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 556.209642] EXT4-fs (sda1): Unrecognized mount option "noblock_vanidity" or missing value [ 556.262751] EXT4-fs (sda1): Unrecognized mount option "noblock_vanidity" or missing value 13:27:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 13:27:16 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f00000011c0)="000000800000800000") [ 556.362402] binder: BINDER_SET_CONTEXT_MGR already set [ 556.368846] binder: 3999:4003 ioctl 40046207 0 returned -16 [ 556.386500] binder: 3999:4003 ERROR: BC_REGISTER_LOOPER called without request 13:27:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6800, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x301, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x0, 0xffffffffffffffff, 0x7}, 0x10) [ 556.484750] binder: undelivered TRANSACTION_COMPLETE [ 556.535855] binder: 4106:4108 ERROR: BC_REGISTER_LOOPER called without request 13:27:16 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) close(r1) 13:27:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80, 0x40000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x4}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x2, 0x610, [0x0, 0x200000c0, 0x200000f0, 0x20000220], 0x0, &(0x7f0000000000), &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}, 0x73b) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000dc0a0000000000000600000000000000fe0b00000000000067880423000000001e5da73cbe53be8765950e3bf5f1d7c3463261546d6b973a92be52454563e57c5d175988c94e3c5717a264c584e2169d0c5f815fc3bbffcdc2fd2057f81aefaafd"]) epoll_wait(r1, &(0x7f0000000140)=[{}, {}], 0x2, 0x4) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000001580)=""/4096, 0x1000}, &(0x7f00000000c0), 0x48}, 0x20) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x5, 0x8000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x20000, 0x0, [0x101, 0x7, 0x0, 0x4, 0x1, 0x8, 0x7fff, 0x1]}) 13:27:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 13:27:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:16 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x80007, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/69, 0x45}], 0x1) [ 556.939917] kernel msg: ebtables bug: please report to author: Wrong len argument [ 556.979619] kernel msg: ebtables bug: please report to author: Wrong len argument 13:27:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x1d6, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r0, r1}) 13:27:17 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1f4, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 13:27:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x100, 0x9}, 0x8) 13:27:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 13:27:17 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000200)=""/131) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r0) read$eventfd(r3, &(0x7f0000000040), 0x8) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @multicast2=0xe0000002, 0x4e21, 0x2, 'none\x00', 0x9, 0x3, 0x3f}, {@multicast2=0xe0000002, 0x1ff, 0x2, 0x4, 0x15e5, 0x100}}, 0x44) 13:27:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xa7, &(0x7f0000000000)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) [ 557.340448] binder: BINDER_SET_CONTEXT_MGR already set [ 557.346480] binder: 4106:4108 ioctl 40046207 0 returned -16 [ 557.371977] binder: 4106:4108 ERROR: BC_REGISTER_LOOPER called without request 13:27:17 executing program 3: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0xfffffffffffffeef, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x2000) 13:27:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x300, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 557.448629] binder: undelivered TRANSACTION_COMPLETE 13:27:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 557.561621] binder: 4204:4205 ERROR: BC_REGISTER_LOOPER called without request 13:27:17 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) close(r1) 13:27:17 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}, [], {0x95}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4b2, 0x28200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8000, 0x1, 0x2}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r2, 0x1e, "23f59590d8e67959e898e7153e0c4b8b3e9c47afaa4df8aafa609f1b3c35"}, &(0x7f0000000300)=0x26) sendfile(r1, r0, &(0x7f00000000c0), 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x7, @empty, 0x7ff}], 0x2c) 13:27:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) 13:27:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:17 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000200)={0x20080522, r0}, &(0x7f0000000240)={0x1, 0xfff, 0xffffffffffffad48, 0x0, 0x6, 0x269}) mkdir(&(0x7f0000000400)='./file0\x00', 0x80) r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x6, 0x101000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000004c0)={@local, @empty, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@mpls_delroute={0x2c, 0x19, 0x100, 0x70bd26, 0x25dfdbfd, {0x1c, 0x94, 0x80, 0x9, 0xfe, 0x1, 0xff, 0x0, 0x200}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x81, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc0045540, &(0x7f0000000000)={0x0, 0x4}) 13:27:17 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\'\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x10001, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 13:27:18 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffffffffffffff, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:18 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x80007, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/69, 0x45}], 0x1) 13:27:18 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)=ANY=[@ANYBLOB="012c3a62f6effb509400000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000068759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"], 0x80}, 0x1}, 0x0) 13:27:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 13:27:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x3, 0x8) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000100)=""/12) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4081, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x200) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000180c200000081000500000186dd061000090180c200e40ffe8000000000000000000000000000bbaaaaaaaaaabbfe8000000000e60d000000000000000a91213a6a9a8c790e503ff7e30a263f3c4fdb567b0114ffbf"], 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) 13:27:18 executing program 3: socket$inet6(0x10, 0x8000b, 0x6) 13:27:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr\x00', 0x4) recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000400)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=""/161, 0xa1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) [ 558.366552] binder: BINDER_SET_CONTEXT_MGR already set [ 558.374659] binder: 4204:4205 ioctl 40046207 0 returned -16 [ 558.392483] binder: 4204:4205 ERROR: BC_REGISTER_LOOPER called without request 13:27:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x480040, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x2) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[], {0x8100, 0x3, 0x7, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x7a, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 558.432607] binder: undelivered TRANSACTION_COMPLETE [ 558.470612] binder: 4290:4291 ERROR: BC_REGISTER_LOOPER called without request 13:27:18 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 13:27:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x80800) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) accept(r0, &(0x7f0000000040)=@xdp, &(0x7f0000000240)=0x157) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffe7ff08004500001c0000000000119078ac14ffbbe00000010000000000089078"], 0x0) r2 = getpid() get_robust_list(r2, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000300)={&(0x7f0000000200)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x18) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) 13:27:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf195ff8, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 13:27:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 13:27:19 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0xc20, 0x70bd2c, 0x9, {0x11}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x80) dup(r1) sendmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="2663419c66853e7500de9687063df87ee71d98ff13225f15453845ac023ad692e8d0cba32c0010629328a9b01c8899bff2d2bf2976a53cbfaf8da7b085c08f00f972ec7e0a88a3d14f2e7d63977b5a64c0e92d18d688490a27dfec72eb56958b8259658cded08238ceaddb5c0e593fdab31303652347d9e8c33d334e33d8188ea5cfbd9a848a07a4a1d811ea55f12e5c7ce1ef726cfc5e3a3e9ffe7a8397f2debd63df57ce355b189a7a5e1cbe816e5a10205294d360f925e7e3f8ee9b0aa99ca21fb00b730a05372001e24724ba8a216593a45b10d7d652455e7447ad22344a374576ca2414c8ed1970", 0xea}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="8ab5344bc40e518344992992295c7297722762dd8bb67cfdcd2b96549d339255293bf9de7143855694ab1dd5f77992b740313ae7f5a19e73696ad08f21e748929497d4029d337ca02e39dc5848e84b4ce3effcce0b65c15a6e72fc8ee3a984a812c7cda28a32da08974cdc5393e6e42dcd4e0bc2b3d63299c709d9b04b8276de6004dfb22dd8df6f6ae2efcf989fbf033cde7761aa7190c3e9862209e4e70d5b3fc0308f899577f098443046d92c7cca9bffa00d22acc5", 0xb7}], 0x4, 0x0, 0x0, 0x48000}, 0x4}], 0x1, 0x8000) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x38}, 0x1}, 0x0) 13:27:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xfffffffffffffffc, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c00000000000001000000000008907823670403e80c67ec91e1364e875d7a4707770d59fff3dc93f3cc9b278b42e3b045a61ab40f11acd15368fe57422dec71649ede2883f6368d54c402ac73d40c2641aa3d0244574361e62c8d88cd06ee285c219ac6400a366a6c7f73601272a0f7f493f519471b69eb6909cf0a72967bd9e76a83be589512cddcdf804d3e72cc8adbd74c9755c61ff527091520a8be6815abeb0d52e5e17546"], 0x0) 13:27:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 13:27:19 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0xc0080) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="4b4cbfc0b5c35cbc23135d58ee0a278402e63c99cefedcdfa6152304d14a4cfa1186789a6a068f22e2494085fa399b1686d21dffc10264eb9561b00e7120d2ee03e8fb45b358e0c9fecdffb0f05081d0ee7f4cb0a59aacdaf9fbf360a2ebd951f52be1dde6be45a48179f2fb32263c181a49a37275b7c12cc784b7e9", 0x7c}], 0x1) 13:27:19 executing program 6: r0 = socket(0x10, 0x802, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001f0000000000000000000000000300000037000000e000000100efff000010000000e6ff5949df56fa28a0a4853f2423e360540b5bd67db59310d5af7c4ec128ab552b2ffffff7ffffff0000000020342c638ebef3fd000000000000"], 0x40}, 0x1}, 0x0) write(r0, &(0x7f0000000bc0)="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", 0xfc) 13:27:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r0, 0x5, 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)={r1, r2+10000000}) [ 559.270416] binder: BINDER_SET_CONTEXT_MGR already set [ 559.280876] binder: 4290:4291 ioctl 40046207 0 returned -16 [ 559.304629] binder: 4290:4291 ERROR: BC_REGISTER_LOOPER called without request 13:27:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6800000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:19 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0xf, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x8000000000000007, 0xffffffeffffffffa}, {0x41, 0x9}, 0x8, 0x1, 0xfff}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) [ 559.393606] binder: undelivered TRANSACTION_COMPLETE 13:27:19 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3100000000000000) 13:27:19 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x200000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x22000, 0x0) ioctl$BLKROSET(r0, 0x40140921, &(0x7f0000000080)) [ 559.498282] binder: 4387:4391 ERROR: BC_REGISTER_LOOPER called without request 13:27:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = dup2(r0, r0) accept$ax25(r1, 0x0, &(0x7f0000000000)) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r2 = getpid() kcmp(r2, r2, 0x0, r0, r0) clone(0x0, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000180)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 13:27:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 13:27:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffffdef, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) r2 = socket$packet(0x11, 0x8000000000003, 0x300) r3 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0xffff, 0x2) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0xfffffffffffffe00}, &(0x7f0000000240)=0x8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@empty, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x4e22, @loopback=0x7f000001}}}, 0x88) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) fcntl$notify(r0, 0x402, 0x2) 13:27:20 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, "7465616d3000000000000000fffffff0"}]}, 0x34}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x6, 0x4) 13:27:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000) 13:27:20 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}, 'veth1_to_bond\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write(r0, &(0x7f0000000080), 0x0) 13:27:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900d) [ 560.292835] binder: undelivered transaction 463, put_user failed [ 560.303169] binder: 4387:4391 ioctl c0306201 200000c0 returned -14 [ 560.326642] binder: BINDER_SET_CONTEXT_MGR already set 13:27:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000002c0)=""/238, 0x1000, 0x1000, 0x7}, 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="80c5dd862aa09832ea10727119b669b661", 0x11}], 0x0, &(0x7f0000000380), 0x16d}], 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000003200)=[{{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/163, 0xa3}}, {{&(0x7f0000001980)=@ll, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/245, 0xf5}], 0x1, &(0x7f0000002fc0)=""/199, 0xc7}}], 0x2, 0x0, &(0x7f00000030c0)={0x0, 0x1c9c380}) getcwd(&(0x7f0000000000)=""/58, 0xffffffffffffff1a) [ 560.345666] binder: 4387:4391 ioctl 40046207 0 returned -16 [ 560.369284] binder: 4387:4391 ERROR: BC_REGISTER_LOOPER called without request 13:27:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$ax25(0x3, 0x5, 0x1, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 560.397255] QAT: Invalid ioctl [ 560.410779] QAT: Invalid ioctl 13:27:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x300000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) [ 560.441207] binder: undelivered TRANSACTION_COMPLETE 13:27:20 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = getpgid(0x0) tkill(r2, 0x13) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 13:27:20 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@random={'btrfs.', 'wlan1\x00'}, &(0x7f0000000140)=')vmnet0!-bdev\x00', 0xe, 0x1) creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000100) [ 560.569581] binder: 4467:4471 ERROR: BC_REGISTER_LOOPER called without request 13:27:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2f) 13:27:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x5, 0x5) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x84, 0x40000) getsockname$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400101c000000000) 13:27:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendto$inet6(r0, &(0x7f0000000080)="4f00070000000000000085980400000000a9572426a476c2", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000012, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 13:27:21 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4002000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:21 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x80}, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x8000) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x90ffffff}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0xbb, &(0x7f0000000300)=""/187, 0x41f00}, 0x27) 13:27:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14d564b00000000) 13:27:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={r0, 0xffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x49}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 561.339316] binder: undelivered transaction 465, put_user failed [ 561.348192] binder: 4467:4471 ioctl c0306201 200000c0 returned -14 [ 561.398701] binder: BINDER_SET_CONTEXT_MGR already set [ 561.412195] binder: 4467:4471 ioctl 40046207 0 returned -16 [ 561.438332] binder: 4467:4471 ERROR: BC_REGISTER_LOOPER called without request 13:27:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x68000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2=0xe0000002, @empty, r2}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000100)=0x80d) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x3, 0x3, 0x3f, 0x800, 0x3, 0x3f, 0x7a0f, 0xa7, 0x38, 0x1e7, 0xffff, 0x3, 0x20, 0x2, 0x3b5, 0x7, 0x921}, [{0x3, 0x3, 0x9, 0xffff, 0x1, 0x3, 0x0, 0xff}], "56bfe2061dd8109b2aef7dca237a4ed04d515cadb68ed9f89b48c82673d0613fab46efb0ff9404c629a1baf29c55744d1f3a77bfb3697f6ad2f2a511a3ab12a96bfa35e924e6632f121c578d5bb79cc4ae98f6684cc537256f15e8d12f4d5e009c6f2070374286f82a13b4074370c782acc5bd06785108d3a9565a7fb83d3e1769e7161967badb2b6d40a9a70ff3cf1ab7a6a8", [[]]}, 0x1eb) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) [ 561.531290] binder: undelivered TRANSACTION_COMPLETE 13:27:21 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:21 executing program 6: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20}}, 0x1f, 0x0, 0x7, 0xdeb5, 0x10}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x8, @mcast2={0xff, 0x2, [], 0x1}}}, [0x80000000, 0x7, 0x1, 0x80000000, 0x60648314, 0x9cd, 0x8, 0x0, 0x3ff, 0x100000001, 0x7f, 0xb9ed, 0x3f, 0x7f, 0x8]}, &(0x7f0000000400)=0x100) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2}}, 0x101}, 0x90) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x800, 0x5, 0x27, 0x11e, 0x2}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = socket(0xa, 0x1, 0xfffffffffffffffe) semget(0x0, 0x0, 0x220) ioctl(r3, 0x9, &(0x7f0000000000)) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000200)={0xd000, 0x6000, 0x7ff, 0x7, 0x4}) 13:27:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x49000000) 13:27:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x1, 0x80000000, 0x3, 0x4, [], [], [], 0x0, 0x400, 0x2, 0x3, "22334323c8550af5070b14659d1ad6f6"}) r1 = socket$inet(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x9, {0x2, 0x4e21}, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x220, 0x1bf9e324, 0x7, 0x8, 0x4, &(0x7f0000000080)='bond_slave_0\x00', 0x6, 0x5, 0xe7}) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff0800450000aeda143f2b5e9721cccc1c0000000000119078ac14ffbbe000"], 0x0) [ 561.636988] binder: 4587:4589 ERROR: BC_REGISTER_LOOPER called without request 13:27:21 executing program 3: capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000fc0fe8)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/81) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') 13:27:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088bbe7a6d5103fd26a975c9384563c4997e23a52993bc0f74219c889524b095e58714913ce454aa3b225b3b9e539d1cb92b04007a5723888a6cbbf03f4e65723449518a000080000000000000000000"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:22 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x7, &(0x7f0000000140)="295ee1311f16f484671070eaa4001f563786164d4e9807355d1f3ef7f8a1cf473ff3cb2efe59ed9fd20ec52adf842ec50a9d7702eccb5b2cef4dafcba5080000009d7b0849a3ec77afd6cc60f8dc31383d3401b0d3f94b03e84d98975bc217d8b74abae07cea8c3346e3bb5865319ed03d5c79b82eb600007b331c4d9bbead03f1cda6f59209ed00000000000000") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x1000) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregset(0x4, r3, 0x800000, &(0x7f0000000000)={&(0x7f00000033c0)=""/4096, 0xfffffffffffffd2c}) 13:27:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000013c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000001440)) r1 = getpgrp(0x0) waitid(0x2, r1, 0x0, 0x80000004, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/rfkill\x00', 0x3) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 13:27:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8) 13:27:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x91ffffff00000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) r1 = accept4(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x80000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000340)=0x2) write$cgroup_type(r2, &(0x7f0000000300)='threaded\x00', 0x9) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000003c0)={0x6000, &(0x7f0000000380), 0x8, r2, 0x5}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x400}, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYPTR], 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000400)={'icmp\x00'}, &(0x7f0000000440)=0x1e) recvfrom$inet(r1, &(0x7f0000000240)=""/1, 0x1, 0x2000, &(0x7f0000000280)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) 13:27:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dffffffffffffff0000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) 13:27:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3b00000000000000) 13:27:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 562.412145] binder: undelivered transaction 467, put_user failed [ 562.423436] binder: 4587:4589 ioctl c0306201 200000c0 returned -14 [ 562.451489] binder: BINDER_SET_CONTEXT_MGR already set [ 562.466141] binder: 4587:4659 ioctl 40046207 0 returned -16 [ 562.494622] binder: 4587:4589 ERROR: BC_REGISTER_LOOPER called without request [ 562.524751] binder_alloc: 4587: binder_alloc_buf, no vma [ 562.530376] binder: 4587:4589 transaction failed 29189/-3, size 0-0 line 2967 13:27:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x5000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:22 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) r2 = dup3(r1, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x64, 0x2e, 0x308, 0x70bd29, 0x25dfdbff, {0x0, r3, {0x2, 0xf}, {0xd, 0x8}, {0x9, 0xfff3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xb5d}, {0x8, 0xb, 0x67d}, {0x8, 0xb, 0x76}, {0x8, 0xb, 0xf9}, {0x8, 0xb, 0x100000000}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x2559}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) close(r1) 13:27:22 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = request_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) keyctl$get_security(0x11, r1, &(0x7f0000000380)=""/40, 0x28) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='vmnet0\x00', 0xfffffffffffffff8) keyctl$get_security(0x11, r2, &(0x7f00000001c0)=""/121, 0x79) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xffffffffffffffdb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) munmap(&(0x7f000099e000/0x3000)=nil, 0x3000) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$TTUNGETFILTER(r3, 0x801054db, &(0x7f0000000240)=""/80) 13:27:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x1000, &(0x7f00000000c0)=0x2) setrlimit(0x1, &(0x7f0000000100)={0x5, 0x6b}) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) 13:27:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4f00) [ 562.570694] binder: undelivered TRANSACTION_ERROR: 29189 [ 562.584851] binder: undelivered TRANSACTION_COMPLETE [ 562.628978] binder: 4682:4684 ERROR: BC_REGISTER_LOOPER called without request 13:27:22 executing program 6: r0 = getpgid(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x50800, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x100, 0x2, 0xf9, 0x7, 0x0, 0x100000000, 0x6000, 0x1, 0x8, 0x1, 0x3, 0x8, 0x27, 0x80000001, 0x1ff, 0x1, 0x0, 0xffff, 0x76, 0xffffffffffff98c1, 0x7, 0x8, 0xffffffff, 0x0, 0xb04, 0x6, 0x0, 0x100000000, 0xfffffffffffffd26, 0x3dde, 0x4, 0xffff, 0xffffffff, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0xa, 0xfdb3, 0x6, 0x0, 0x4, 0x10001, 0xf14}, r0, 0x8, r1, 0x8) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000240)={"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"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00080000ec050000130200001200000400000000000200000001000084811f01e10000001e000000150000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900)) [ 562.810998] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 562.847448] REISERFS (device loop6): using ordered data mode [ 562.853451] reiserfs: using flush barriers [ 562.888678] REISERFS warning (device loop6): sh-459 journal_init: unable to read journal header [ 562.900062] REISERFS warning (device loop6): sh-2022 reiserfs_fill_super: unable to initialize journal space 13:27:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) fremovexattr(r0, &(0x7f0000000200)=@known='security.selinux\x00') madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000e2a000/0x1000)=nil, 0x5) 13:27:23 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x400000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x4000000000, 0x6, 0x200}) 13:27:23 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1000, 0x0) sendto$inet6(r0, &(0x7f0000000040)="237dd2ae709aa42ce7d71d211ba15f7c429a8430be40daf2ff92450be6f1747df65183b624416186a0f3d2cdd0318f990b5ea1fb3486794cde4dc6375bcc4a570fbd36ffb1c46f1c8eb2700a83036f172355998d934d02f1204daa1fe846a929e91bcbf993b288f0", 0x68, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffffffffffff7, @mcast2={0xff, 0x2, [], 0x1}, 0x7fffffff}, 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/42, 0x2a}], 0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000340)={0x40, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x300, 0x5c63afe7, 0x6, 0x47d3c095, 0x1ff, &(0x7f0000000300)='bcsh0\x00', 0x7, 0x1, 0x1}) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x6c7, @empty, 0xfffffffffffffff7}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x2, 0x5, 0x3c6, 0x16, 0x81, 0x8c, 0x80}, "0f9be42bc6cbf402ab4ac61b04daaf03219ecc755ea860facde1b938c3b38f6ddb507e5de7e365ec535a89b3d27ee448b802c79d2b249fc0a4efb343e3019cf77483a6199bcc185ddb79e7ecdd1a70122be5ae1cb736b758d0a361be4dabf862ebfcce549ca9a02202bbd8ff61febad0203ea69f4a09d2901e3cbd6368401b36426ee5d06a3874b84a5483957c998a8ebc2da645bdba8aefe7f991f35fe24297330a9f6e720b69fdf41a2cbcc1563fe60a6f7f4514b5ff1db92f", [[], [], [], [], [], []]}, 0x6da) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000b00)={0x0, 0x8}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b80)={r1, 0x99, "3e5a221088dcc4ef1b323058f8d6c1b24a2b9eefbe9037b326a4cc81860a3574cd88cecd57c479fdfc9a7c280dce7dd381669280d124f765f98e7917427013631457e6b7e7e1b41a9701d229eff16cdb3b668b1a18ff225b40853ede75f5aa45be018607f5b905f66c021407f8ddba9cbe6aaba7956431393584521bb6e42cb98e9ee62e0d0880f73bbc6b46b25efbfa04fceeb39deeb9cd0b"}, &(0x7f0000000c40)=0xa1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000c80)={r2, 0x1}, &(0x7f0000000cc0)=0x8) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000d00)={0x10000, 0x1}) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x4}, 0x4e24, 0x0, 0x4e23, 0x100000000000, 0xa, 0xa0, 0x20, 0x1, 0x0, r3}, {0x3, 0x712, 0xff, 0x6, 0x2ef4e66f, 0xffffffffffffffc0, 0x5, 0x200}, {0x2, 0x100000000, 0x5}, 0x400, 0x6e6bb0, 0x2, 0x1, 0x2, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d5, 0x33}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3502, 0x2, 0x2, 0xffffffff, 0x2, 0x7f, 0x9}}, 0xe8) pwrite64(r0, &(0x7f0000000f00)="bc48920d52ce473b6e052eb9fd6e08ff514a2c0b6dbc605858e12ca9c9e8e97b8097700e91a1f8bbf24d3ba1c003e3a2f371e721d52def0603458b4ab8bb1a366780d3464cd114b40734a448f455b95269517c73765aec9c229001b4043d407e9896d6d29f710db19c5b38a0efb94be388549b19ebc00ced50", 0x79, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x160, r4, 0x0, 0x70bd25, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffff801}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x40) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001200)={'veth0_to_bridge\x00', {0x4, 0x0, 0x8, "16231c349345", 0x4}}) write(r0, &(0x7f0000001240)="351796d9812a632c5d40b0b9aecc097b3cd9d397b7ef85a6dce7655e28b31398", 0x20) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001280)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000012c0)={r5, 0x80000, r0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001340)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x140, 0x260, 0x398, 0x398, 0x398, 0x4, &(0x7f0000001300), {[{{@arp={@rand_addr=0xff, @broadcast=0xffffffff, 0xffffffff, 0xff, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0x0, 0xff]}, 0x8, 0x5, 0x401, 0x0, 0xfff, 0x5, 'dummy0\x00', 'bpq0\x00', {0xff}, {0xff}, 0x0, 0x1c}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, @empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x9, 0x7fffffff, 0x1}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) fgetxattr(r0, &(0x7f0000001840)=@known='system.sockprotoname\x00', &(0x7f0000001880)=""/227, 0xe3) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001980)={0x4, 0x2}) bind$inet6(r0, &(0x7f00000019c0)={0xa, 0x4e21, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/uinput\x00', 0x50000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000001a40)={0x166b, 0x9, 0x1}) ioctl$KDDELIO(r0, 0x4b35, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000001a80)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) 13:27:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010000) 13:27:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x80040000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:23 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:23 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[]], 0x1c7) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x1813, r0, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000, 0x7, &(0x7f0000e00000/0x200000)=nil) listen(r0, 0xc9) [ 563.433310] binder: undelivered transaction 470, put_user failed [ 563.443010] binder: 4682:4684 ioctl c0306201 200000c0 returned -14 [ 563.467849] binder: BINDER_SET_CONTEXT_MGR already set [ 563.473619] binder: 4682:4684 ioctl 40046207 0 returned -16 [ 563.479952] binder: 4682:4684 ERROR: BC_REGISTER_LOOPER called without request 13:27:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6c, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000300)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=@uqnoenforce='uqnoenforce') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x80}) 13:27:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) times(&(0x7f0000000280)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000200)={{0x2, 0x0, 0x57, 0x2, 0xfffffffffffffff7}, 0x6, 0x349a, 0x2}) keyctl$session_to_parent(0x12) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101701, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/30) 13:27:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a1001c000000000) 13:27:23 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x80041) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) r3 = getpgrp(r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000001980)={0x0, 0x100}, &(0x7f00000019c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001a00)={r5, 0x9}, &(0x7f0000001a40)=0x8) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r3}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecaffc)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2e, 0x200, 0x70bd2c, 0x25dfdbff, {0x7}, [@nested={0x3c, 0x2f, [@typed={0x8, 0x41, @fd=r0}, @typed={0x8, 0x26, @uid=r7}, @typed={0xc, 0x6a, @u64=0x100}, @typed={0x8, 0x77, @fd=r0}, @generic="73bde328ae9e69edc73992d05746f21583c869"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) setpriority(0x0, r6, 0x0) [ 563.516083] binder: undelivered TRANSACTION_COMPLETE 13:27:23 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) [ 563.605194] binder: 4778:4781 ERROR: BC_REGISTER_LOOPER called without request [ 563.640520] XFS (loop3): Invalid superblock magic number [ 563.747189] XFS (loop3): Invalid superblock magic number 13:27:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:24 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendfile(r0, r1, &(0x7f0000000080)=0x6800, 0x81) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x6, 0x1f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000380)=0x100000000, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r3, @in6={{0xa, 0x56, 0x6, @loopback={0x0, 0x1}, 0x20}}, 0x1, 0x7d95000000000, 0x3, 0x2, 0x6e}, &(0x7f0000000140)=0x98) 13:27:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xfffffffffffffffb, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000080)=0xc) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0080000000308f78ac03ffc0f9ffffff0013000000089078"], 0x0) 13:27:24 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa0010000) 13:27:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x11103f, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/153) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0800010019cfd0228d6926c1"], &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x3ff, 0x6, 0x7, 0x2, 0x7}, 0x14) dup3(r2, r0, 0x0) 13:27:24 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:24 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @multicast1=0xe0000001}, {0x6}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) [ 564.400223] binder: BINDER_SET_CONTEXT_MGR already set [ 564.454924] binder: 4778:4842 ioctl 40046207 0 returned -16 [ 564.479253] binder: 4778:4781 ERROR: BC_REGISTER_LOOPER called without request 13:27:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x68, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000119078ac1421bbe00000010000000000089078597aa0d171"], 0x0) 13:27:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x7, 0x92, &(0x7f0000ffc000/0x4000)=nil}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x4}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000000000000070000008612b75e7eff7f00000000147008ee6100004a9273640000"], 0x28}}], 0x2, 0x0) 13:27:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa001) 13:27:24 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:24 executing program 6: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44c2d000", @ANYRES16=r2, @ANYBLOB="000027bd7000ffdbdf25010000000800020000000000080003001d000000080003001100000008000300ff0000000400050004000500080001004e240000"], 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}, 0x1}, 0x0) [ 564.517085] binder: undelivered TRANSACTION_COMPLETE 13:27:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) [ 564.590952] binder: 4865:4868 ERROR: BC_REGISTER_LOOPER called without request 13:27:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:25 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x3, 0x1, 0x55506a9, 0x5, 0x1]}, &(0x7f00000002c0)=0xe) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r1) 13:27:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0xa1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140), &(0x7f0000000200)=0x4) 13:27:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d01) 13:27:25 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc00, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x20) 13:27:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1}, 0x8) 13:27:25 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) [ 565.385374] binder: BINDER_SET_CONTEXT_MGR already set [ 565.392070] binder: 4865:4868 ioctl 40046207 0 returned -16 [ 565.409321] binder: 4865:4868 ERROR: BC_REGISTER_LOOPER called without request 13:27:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x4800000000000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:25 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"69666230000000ff8800", {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 13:27:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5, 0x10, 0x8, 0xd355}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x20001ff, 0x80000000, 0x400, r1}, &(0x7f0000000200)=0x10) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0xb) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000119078ac14ff01000000010000000000089078"], 0x0) 13:27:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000000007d95c85e161278690880004e1d310e524467c8a1068dd386840008003300000000"], 0x2b) 13:27:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20100c000000000) [ 565.534739] binder: undelivered TRANSACTION_COMPLETE [ 565.558974] sg_write: data in/out 17985/1 bytes for SCSI command 0x8-- guessing data in; [ 565.558974] program syz-executor3 not setting count and/or reply_len properly [ 565.626210] binder: 4934:4937 ERROR: BC_REGISTER_LOOPER called without request 13:27:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xb05, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1}, 0x0) 13:27:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf3ffffff) 13:27:26 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0xa000003fe, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x800, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)="6e6673004c46adcff8821f33333d1f59b40d9316e02f728af89e13634066edc28f866db03c8639fedf89ecc12d0d7df3d1fe67c977d5c36c", 0x0, &(0x7f000000a000)) 13:27:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="0ce3ffa5fffffffffff5ffff08004500001c20800000f5109078ac14ffbb1c3600010000000002000000"], 0x0) 13:27:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010141) 13:27:26 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5400, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/109, 0x6d) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) r4 = semget$private(0x0, 0x7, 0x242) semop(r4, &(0x7f0000000480)=[{0x3, 0x100000001, 0x800}], 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000400)=""/29, &(0x7f0000000440)=0x1d) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000002c0)={{0x4, 0x5, 0x4, 0x1, 'syz0\x00', 0x3}, 0x1, 0x9, 0x8, r3, 0x2, 0x7f, 'syz0\x00', &(0x7f0000000280)=['./cgroup.net/syz1\x00', '\x00'], 0x13, [], [0x8, 0x8, 0x3e4f783e, 0xc2]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 13:27:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:26 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) [ 566.331403] IPVS: length: 29 != 8 [ 566.346582] rpcbind: RPC call returned error 22 [ 566.359186] IPVS: length: 29 != 8 13:27:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000000040)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 13:27:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 566.421531] binder: undelivered transaction 476, put_user failed [ 566.431281] binder: 4934:4937 ioctl c0306201 200000c0 returned -14 [ 566.477344] binder: BINDER_SET_CONTEXT_MGR already set [ 566.501704] binder: 4934:4937 ioctl 40046207 0 returned -16 [ 566.535762] binder: 4934:4937 ERROR: BC_REGISTER_LOOPER called without request [ 566.609112] binder: undelivered TRANSACTION_COMPLETE 13:27:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x6000000, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:26 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0011022) 13:27:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 13:27:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000000040)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 13:27:26 executing program 6: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1}, 0x8) 13:27:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@setneightbl={0x14, 0x43}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f0000000180)="24000000210025f006f90165fffffc0e0204000000fff20182a9000c0800010000000000", 0x24) 13:27:26 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:26 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @multicast1=0xe0000001}, 0x44}) [ 566.748313] QAT: Invalid ioctl [ 566.768995] QAT: Invalid ioctl 13:27:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0xa, 0x1, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000200)={0x7ff, 0x4}) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8df0ffb8ffffffffffffffffff08004501ff1c0000000000119078ac14ffbbe0ff7f000000005d09089078292020b325eb40e805e0e373e3c81c340ad0e2f68a52e42fd32bced483018d6f429cc488f008ad0ef5f5eee2a95177aaec6d2f0893108bf6204d3e30c8de2936ef4d2e74bb9796dd643ddb97927e8ca8baa89ed303fbb1559d0ab1adaca782ec401b625b5b000fc0cf0afa18b00386c2c42eb038989b555b784d307a1c09ea7a6a47f62475a5a61695fe96626060c5dc4826d478b6e41681a6f8a40b5fab581ee7342d0304d18ce779645a799166b8cda5dd31fa"], 0x0) [ 566.939832] binder: 5018:5040 ERROR: BC_REGISTER_LOOPER called without request 13:27:27 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x480, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:27 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(0xffffffffffffffff) 13:27:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="af95164b3514ffffffffffff86dd602418aa00080000000000000000000000000000000000ffffac14140281009078000000000000000000000000000000"], &(0x7f00000001c0)) 13:27:27 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000540)) mount(&(0x7f00000008c0)='.', &(0x7f0000000740)='./file0\x00', &(0x7f0000000800)='mslos\x00', 0x405010, &(0x7f0000000900)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000680)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 13:27:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb700004000000000) [ 567.728979] binder: undelivered transaction 478, put_user failed [ 567.735257] binder: 5018:5040 ioctl c0306201 200000c0 returned -14 [ 567.762517] binder: BINDER_SET_CONTEXT_MGR already set [ 567.862793] binder: 5018:5078 ioctl 40046207 0 returned -16 [ 567.912537] binder: 5018:5040 ERROR: BC_REGISTER_LOOPER called without request [ 567.936471] binder_alloc: 5018: binder_alloc_buf, no vma [ 567.942091] binder: 5018:5040 transaction failed 29189/-3, size 0-0 line 2967 13:27:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x500, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xff) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:27 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(0xffffffffffffffff) 13:27:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r1, 0x0, 0x8}, 0xc) 13:27:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6400000000000000) 13:27:27 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xbe603ffd3a000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) [ 567.975293] binder: undelivered TRANSACTION_ERROR: 29189 [ 568.002187] binder: undelivered TRANSACTION_COMPLETE 13:27:28 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(0xffffffffffffffff) 13:27:28 executing program 3: [ 568.065346] binder: 5102:5104 ERROR: BC_REGISTER_LOOPER called without request 13:27:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@sco={0x1f, {0x7, 0xfff, 0x2, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)="3578b51cb0a616e359033edc5da04abbd7ccc3bfbf72dcddbe816aff85959c8d23120a", 0x23}, {&(0x7f0000000100)="720a53fee7aba0ead4ac2f6aaac8f210c1a08322e7e88e3bd9cd60aa71b8fe29228706a8ca58c7", 0x27}, {&(0x7f0000000140)="d6bcd334eda3c81eb9ecc728c3c09e7b69d804af98699adcc76e49b6c2d93a866e2ac79a3cecb8627d339c16aab3b21a2d26f65a574fde8648ec1d31c7", 0x3d}, {&(0x7f0000000200)}, {&(0x7f0000000240)="d95f86a1c6558b7ed15c09485388e5ed9b01f50c6b24bb8e77d783b93f0091251d9aa6f86bfeb01f5b71735e4612e5fc106c691854b0e53b66bd3afb9823d63a2d7124edee8719b4714b8544eb9bde8c26ff3ea04e4a8027715aea53cb4800971f", 0x61}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="15a5b0b012768feb8aa0119e94ebf3f17f95bde7a4bf7ba9f442499afa7161e8957ac5df4150b1d55a1f209986d3008c7ce4459182cafc67983b05", 0x3b}, {&(0x7f0000001300)="20a4ca91b7fbe823a54081c49fc2a467b013140c51afcba2199d3568ee2df0a34d4a044c2d8837ca29e08babc4974a1dc3c0c1a7c1b47b916ecd6ae4493de05cc5f367d3d3cbc3f01803e20260c8a4c32bd5d08899bbb8c99bf6dda2718a6f600f85beda79f70eeb3dc0f85a6450f35c70581bede2c0c53748aef0df77fd09d8e75d9ab96372018537", 0x89}, {&(0x7f00000013c0)="55e8ade1897b3fc120457e1ed9aeead414de44dd8020a9b0c99ab7e6e55c490d2810683119657332678fb131d930a328b8dbf06bf7263408f20b057c662d8068ebc14f22c08ad23a613bca238593e3b1d7d833749edc15924dae10b54ca67d4c970d1c8c827faf873ff8", 0x6a}], 0x9, &(0x7f0000001500)=[{0x80, 0x3b, 0xff, "547b12f3f5f79e972daa14d98e0424e723e9feea441e38866a435b343020398c4192f94fe5b91ffa4ff233ff98bb4ee5efe0381352661c80401aa1f8c2fce1172334f2eaef4aaf90667a0debcf652bbde2c347d1395fcacf47a886ef3a2f89d93ef9fdc3c4623e79e6c46e8a9161634a"}, {0x68, 0x10b, 0xe1, "6fae94b194d5da9775531d29ed66feab1c853b6aa97002612bff7ec24f30580fe5492f52d9bac7347c5a75e84bb0948e8aa7b0664f7a7bb6b3d61b191b1ce4f23107d20860325789a865650fcb25a5efc2c27cfd1a"}, {0x30, 0x108, 0x9, "6012fd0eeba543c796a0d0a4cfed7f385a1e1c6e38c44415674b451a83"}], 0x118, 0x20000010}, 0x4000) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 13:27:28 executing program 3: 13:27:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x170101c000000000) 13:27:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:28 executing program 3: 13:27:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x80000) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @loopback, 0x0}, &(0x7f0000000100)=0xc) connect$packet(r1, &(0x7f0000000140)={0x11, 0x1b, r2, 0x1, 0x2, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 568.870932] binder: BINDER_SET_CONTEXT_MGR already set [ 568.876362] binder: 5102:5104 ioctl 40046207 0 returned -16 [ 568.886257] binder: 5102:5104 ERROR: BC_REGISTER_LOOPER called without request [ 568.930167] binder: undelivered TRANSACTION_COMPLETE 13:27:35 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) 13:27:35 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000000) 13:27:35 executing program 3: 13:27:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004537a15ede52f1bbf3119078ac14ffbbe00000010000000000089078"], 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000540)={0x3, r3}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) accept(r1, 0x0, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x60000, 0x0) accept$netrom(r4, &(0x7f0000000440), &(0x7f0000000400)=0x10) fcntl$setsig(r0, 0xa, 0x1) r5 = accept4(r1, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00ba704edefff1ff5e160800253ab93fbbdbdfbc598f582b068125000000007f1482500d29e824b9d3ffa3e1f929e988570d2e88d36876551e21", @ANYRES32=r6, @ANYBLOB="04000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x8811) 13:27:35 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1802000000000000, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x7a00, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088b"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:35 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) [ 575.358308] binder: 5160:5164 ERROR: BC_REGISTER_LOOPER called without request 13:27:35 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) r0 = memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x4, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r1) 13:27:35 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0xa000003fe, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x800, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)="6e6673004c46adcff8821f33333d1f59b40d9316e02f728af89e13634066edc28f866db03c8639fedf89ecc12d0d7df3d1fe67c977d5c36c", 0x0, &(0x7f000000a000)) 13:27:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) [ 575.495961] xprt_adjust_timeout: rq_timeout = 0! 13:27:35 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) memfd_create(&(0x7f00000001c0)='wlan0\x00', 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r0) 13:27:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x2, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18100000000000000000000000000000"], &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0xfb, &(0x7f00005d4000)=""/251}, 0x48) 13:27:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x9c, 0x23, 0x0, 0x0, 0x0, 0x0, [@migrate={0x88, 0x11, [{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@loopback={0x0, 0x1}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6}, {@in=@dev={0xac, 0x14}, @in=@broadcast=0xffffffff}]}]}, 0xfffffe7b}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000001800)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000002e00)=""/90, 0x5a}}], 0x1, 0x0, &(0x7f00000037c0)={0x0, 0x1c9c380}) 13:27:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6500) [ 576.128605] binder: BINDER_SET_CONTEXT_MGR already set [ 576.140942] binder: 5160:5164 ioctl 40046207 0 returned -16 [ 576.166084] binder: 5160:5164 ERROR: BC_REGISTER_LOOPER called without request [ 576.224317] binder: undelivered TRANSACTION_COMPLETE 13:27:36 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340)}, 0xa000003fe, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)="6e6673004c46adcff8821f33333d1f59b40d9316e02f728af89e13634066edc28f866db03c8639fedf89ecc12d0d7df3d1fe67c977d5c36c", 0x0, &(0x7f000000a000)) 13:27:36 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r3 = dup2(r2, r1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x5, 0xac, 0x8000, 0x1, 0x5, 0x2, 0x8, 0x7fff, 0x18, 0x1, 0x0, 0x9}) 13:27:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3300) 13:27:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper={0x630b}], 0x1, 0x4c, &(0x7f0000000240)='I'}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x19, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001"], 0x0, 0x0, &(0x7f0000fedffe)}) 13:27:36 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000700)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r5, r4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)=ANY=[]) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfc, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x2d, r7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x20}}) ftruncate(r6, 0x80080) 13:27:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) socketpair(0x0, 0x804, 0x100000000, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002040), 0x2) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in6=@mcast1}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) sendto$ax25(r4, &(0x7f0000000800)="c23829563c00408cfeacdad1354624adb19f6cc28b787e6840b7118764fb41f9e0db42f0fa892c3c1c7d92ca5ccf5004ed77055ad882a8b5330a31f0140a9c2ae0d1a69192a1cf8b2d2ad41c8c855a06ee90ec300789652011ff640c0fdb159d63900315ee42ef1e501e0504445b952b5bab57c555428ffbf82056c410c45863eacdd0687d856ee65816b5ad", 0x8c, 0x48004, &(0x7f0000000540)={0x3, {"7f52f1464ba2a1"}, 0x1}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0200"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000980)={'teql0\x00', @ifru_data=&(0x7f0000000740)="9c88644cbaa27752ef4b5e500064aad2d055d51d2165dbbb2474cd04298a1ebf"}}) sendmmsg(r5, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000bc0)}, 0x7}], 0x1, 0x20004810) sendto$inet(r5, &(0x7f0000000640)="87c7ce397531268d2ef1b29bb4949ef49b66ae2d", 0x14, 0x800, &(0x7f0000000680)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="03107228b6b16bacd326d55da1de0bb9866ffbea92956ea613f41b0ae9116fe6991244118103b7298fefdf3f48a7231e0a148eead409d4da3f252dd733973e30b93a7b80322d3ce775aa3b5453088b"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x9, 0xffff}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000340)=0x8) listen(r0, 0xffffffffffffff7f) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f000051c000), 0x0) 13:27:36 executing program 1: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000380)='./control/file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') close(r0) [ 576.685085] binder: 5224:5228 ERROR: BC_REGISTER_LOOPER called without request 13:27:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 13:27:36 executing program 6: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, 0xc) 13:27:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xce000000) 13:27:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x0, &(0x7f0000000080)=ANY=[], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) 13:27:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") syz_fuseblk_mount(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:27:36 executing program 6: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x8) 13:27:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) 13:27:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 13:27:37 executing program 6: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) 13:27:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0fffffffffffffffeffff08004500001c0000000000119078ac14ffbbe00000010000000000089078"], 0x0) 13:27:37 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r1, r2, 0x0, r3, r4) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r5) r7 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r6) syncfs(r3) r8 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r6) keyctl$update(0x2, r8, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r7}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'tgr160-generic\x00'}}) 13:27:37 executing program 3: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4040, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) chroot(&(0x7f0000000000)='./file0\x00') fallocate(r0, 0x0, 0x0, 0x5) [ 577.397022] ================================================================== [ 577.404800] BUG: KASAN: slab-out-of-bounds in tgr160_final+0x93/0xe0 [ 577.411305] Write of size 20 at addr ffff8801d767b7d4 by task syz-executor6/5307 [ 577.418837] [ 577.420477] CPU: 0 PID: 5307 Comm: syz-executor6 Not tainted 4.17.0+ #102 [ 577.427486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.436843] Call Trace: [ 577.439449] dump_stack+0x1c9/0x2b4 [ 577.443082] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.448271] ? printk+0xa7/0xcf [ 577.451556] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 577.456323] ? tgr160_final+0x93/0xe0 [ 577.460128] print_address_description+0x6c/0x20b [ 577.464974] ? tgr160_final+0x93/0xe0 [ 577.468789] kasan_report.cold.7+0x242/0x2fe [ 577.473212] check_memory_region+0x13e/0x1b0 [ 577.477628] memcpy+0x37/0x50 [ 577.480741] tgr160_final+0x93/0xe0 [ 577.484378] ? tgr128_final+0x170/0x170 [ 577.488367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.493911] ? tgr192_update+0x18a/0x520 [ 577.497990] ? kasan_unpoison_shadow+0x35/0x50 [ 577.502586] crypto_shash_final+0x104/0x260 [ 577.506923] ? tgr128_final+0x170/0x170 [ 577.510910] __keyctl_dh_compute+0x1198/0x1be0 [ 577.515518] ? copy_overflow+0x30/0x30 [ 577.519422] ? save_stack+0xa9/0xd0 [ 577.523088] ? lock_release+0xa30/0xa30 [ 577.527093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.532624] ? _copy_from_user+0xdf/0x150 [ 577.536768] keyctl_dh_compute+0xc5/0x11f [ 577.540925] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 577.545678] ? kzfree+0x28/0x30 [ 577.548953] __x64_sys_keyctl+0x12a/0x3b0 [ 577.553102] do_syscall_64+0x1b9/0x820 [ 577.556989] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.561913] ? syscall_return_slowpath+0x31d/0x5e0 [ 577.566854] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 577.572214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.577066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.582244] RIP: 0033:0x455b29 [ 577.585429] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.604766] RSP: 002b:00007fd20b561c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 577.612464] RAX: ffffffffffffffda RBX: 00007fd20b5626d4 RCX: 0000000000455b29 [ 577.619728] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 577.626986] RBP: 000000000072bea0 R08: 0000000020c61fc8 R09: 0000000000000000 [ 577.634254] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 577.641520] R13: 00000000004bfd31 R14: 00000000004ceb30 R15: 0000000000000000 [ 577.648791] [ 577.650404] Allocated by task 5307: [ 577.654030] save_stack+0x43/0xd0 [ 577.657489] kasan_kmalloc+0xc4/0xe0 [ 577.661187] __kmalloc+0x14e/0x760 [ 577.664715] __keyctl_dh_compute+0x1000/0x1be0 [ 577.669284] keyctl_dh_compute+0xc5/0x11f [ 577.673422] __x64_sys_keyctl+0x12a/0x3b0 [ 577.677559] do_syscall_64+0x1b9/0x820 [ 577.681440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.686612] [ 577.688233] Freed by task 4908: [ 577.691504] save_stack+0x43/0xd0 [ 577.694957] __kasan_slab_free+0x11a/0x170 [ 577.699190] kasan_slab_free+0xe/0x10 [ 577.702985] kfree+0xd9/0x260 [ 577.706096] kvfree+0x61/0x70 [ 577.709194] kvm_arch_free_memslot+0x85/0x270 [ 577.713681] kvm_free_memslot+0xb8/0x110 [ 577.717741] kvm_free_memslots+0x99/0x100 [ 577.721886] kvm_put_kvm+0xa05/0x1060 [ 577.725676] kvm_vm_release+0x42/0x50 [ 577.729474] __fput+0x35b/0x8b0 [ 577.732755] ____fput+0x15/0x20 [ 577.736041] task_work_run+0x1ec/0x2a0 [ 577.739921] do_exit+0x1b08/0x2750 [ 577.743449] do_group_exit+0x177/0x440 [ 577.747325] get_signal+0x88e/0x1970 [ 577.751038] do_signal+0x9c/0x21c0 [ 577.754569] exit_to_usermode_loop+0x2de/0x370 [ 577.759146] do_syscall_64+0x6be/0x820 [ 577.763043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.768215] [ 577.769832] The buggy address belongs to the object at ffff8801d767b7c0 [ 577.769832] which belongs to the cache kmalloc-32 of size 32 [ 577.782399] The buggy address is located 20 bytes inside of [ 577.782399] 32-byte region [ffff8801d767b7c0, ffff8801d767b7e0) [ 577.794087] The buggy address belongs to the page: [ 577.799022] page:ffffea00075d9ec0 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff8801d767bfc1 [ 577.808487] flags: 0x2fffc0000000100(slab) [ 577.812719] raw: 02fffc0000000100 ffffea0007613dc8 ffffea00075b19c8 ffff8801da8001c0 [ 577.820594] raw: ffff8801d767bfc1 ffff8801d767b000 000000010000002d 0000000000000000 [ 577.828460] page dumped because: kasan: bad access detected [ 577.834155] [ 577.835769] Memory state around the buggy address: [ 577.840686] ffff8801d767b680: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 577.848046] ffff8801d767b700: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 577.855400] >ffff8801d767b780: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 577.862742] ^ [ 577.868962] ffff8801d767b800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 577.876306] ffff8801d767b880: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 577.883660] ================================================================== [ 577.891003] Disabling lock debugging due to kernel taint [ 577.896704] Kernel panic - not syncing: panic_on_warn set ... [ 577.896704] [ 577.904168] CPU: 0 PID: 5307 Comm: syz-executor6 Tainted: G B 4.17.0+ #102 [ 577.912473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.921809] Call Trace: [ 577.924388] dump_stack+0x1c9/0x2b4 [ 577.928000] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.933183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 577.937947] panic+0x238/0x4e7 [ 577.941128] ? add_taint.cold.5+0x16/0x16 [ 577.945273] ? do_raw_spin_unlock+0xa7/0x2f0 [ 577.949676] ? tgr160_final+0x93/0xe0 [ 577.953461] kasan_end_report+0x47/0x4f [ 577.957429] kasan_report.cold.7+0x76/0x2fe [ 577.961744] check_memory_region+0x13e/0x1b0 [ 577.966140] memcpy+0x37/0x50 [ 577.969230] tgr160_final+0x93/0xe0 [ 577.972843] ? tgr128_final+0x170/0x170 [ 577.976807] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.982330] ? tgr192_update+0x18a/0x520 [ 577.986376] ? kasan_unpoison_shadow+0x35/0x50 [ 577.990942] crypto_shash_final+0x104/0x260 [ 577.995248] ? tgr128_final+0x170/0x170 [ 577.999218] __keyctl_dh_compute+0x1198/0x1be0 [ 578.003787] ? copy_overflow+0x30/0x30 [ 578.007658] ? save_stack+0xa9/0xd0 [ 578.011278] ? lock_release+0xa30/0xa30 [ 578.015242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.020762] ? _copy_from_user+0xdf/0x150 [ 578.024895] keyctl_dh_compute+0xc5/0x11f [ 578.029038] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 578.033777] ? kzfree+0x28/0x30 [ 578.037044] __x64_sys_keyctl+0x12a/0x3b0 [ 578.041179] do_syscall_64+0x1b9/0x820 [ 578.045408] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.050327] ? syscall_return_slowpath+0x31d/0x5e0 [ 578.055244] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 578.060594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.065421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.070600] RIP: 0033:0x455b29 [ 578.073768] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.092933] RSP: 002b:00007fd20b561c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 578.101154] RAX: ffffffffffffffda RBX: 00007fd20b5626d4 RCX: 0000000000455b29 [ 578.108407] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 578.115660] RBP: 000000000072bea0 R08: 0000000020c61fc8 R09: 0000000000000000 [ 578.122915] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 578.130174] R13: 00000000004bfd31 R14: 00000000004ceb30 R15: 0000000000000000 [ 578.137990] Dumping ftrace buffer: [ 578.141519] (ftrace buffer empty) [ 578.145220] Kernel Offset: disabled [ 578.148839] Rebooting in 86400 seconds..