x0) recvmmsg(r3, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) 13:43:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x400300, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x602) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000100)) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) 13:43:00 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) munlock(&(0x7f0000006000/0x3000)=nil, 0x3000) syz_open_dev$loop(0x0, 0x0, 0x4000) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000100)=0xfe0f) pipe(0x0) clone(0x1000002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) 13:43:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10103, 0x142) 13:43:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x400) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001380)={0x0, 0x6}, &(0x7f00000013c0)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000001480)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x9}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="fa4d2d1bc3e7068ebe619a00d7e5ba5a425f1ec29741a91b03039115b8fabd703e6b31f586a145b4b03d82f276a16bdce79664d42aa39d940bb522440c92e0095047d36fe9d94778a99445f1c9358f79b1cfc4148df513", 0x57}, {&(0x7f0000000080)="933db51a72c68ec95cc0a073afd0b6eb86d8a2fb8c8f756c9db341513e65979e1796137fe8042a2cd4", 0x29}, {&(0x7f0000001180)="9266dbcbb0220ac22305d4fcbe0fcb5ac222fd5acf8e547e221f3e95222f6ca58afad70eef987a8aaab8a53ff70ead41b3992ccb487f6ca18209438373047b", 0x3f}, {&(0x7f00000011c0)="2603dd8f7b2f3af241492baf290ce767372d4ad5c90d3e736ea7cb14f39323d6fd5fd8b084ac58d08bd1ee787786f5a8ba88672a1c041b287755decc5c1696b77e29863e41bc4c85694aa0cea8b2a82a7edd8c9e9cb13c164f7faf4d6a942833d278fc17edbefa2a8fbc60a89a97640442780e9458fe3f02ec38a11ee24b25c9ca41de072ef1d276fe2381f361b06b33a94c0b3de352b5b26dee20893e58bc26c3", 0xa1}, {&(0x7f0000001280)="344ce0d22b6802d11530eb6b37514f0609c07a85ece9323dd9e320246183becd6110f96723a2caf762363ec558e76a9e7600d917a857099ff29543f6e6cc16de5b6da6f85f311b179e0132242cae1c195d81760b524267b22c21b48d92208a6ca45bc0f4a2791cc666783aa47478b60a", 0x70}], 0x6, &(0x7f0000001400)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x1, 0x8, 0x5, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x27}}], 0x80, 0x10}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioperm(0xe0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000006800)=[{{&(0x7f00000014c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x3, 0x9, "766046d8062fbb48cdc32b3f44da683e2995434de3239eacf7128cb1b8cbe873bf2954d7666af2bc1e3d5d5d88735be49ca9b944c6a7759c611c51bd5de177", 0x9}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001540)="f611b3d0a9afe85a9dd833d406798be76d6c979506e84d207a0accf9ce3334c2bbf2bc8a4ed2e80fb386be14ea11eb78f0f5a8046b864c2ba9b69dec8c5feb2176498a06f8de166f249bc0ccbd7eb1fbad94c00333bdb421cc49f68be957d0dac23fb2febf300cba2334ef1555913dc5a694df9435972b7591da10f2eb6893eb5d4717428ebb976b005424edafc498a1000c20e9cf43b59e943cbc7a5209e2e6e1b2ef1477b1e760cb62ab95a43b", 0xae}, {&(0x7f0000001600)="b75675ccf5171fde40e3b93b38aadb2308c0", 0x12}, {&(0x7f0000001640)="36a0e68519c37b40b11863fae7f78392bc0721e1e99560b4fc76c2d91c4cf31b4637266bc524641c4cdb9d06f820d8602714b74d9cc5e6788999bd709fa90741426db78cf6bb32b7186d2f", 0x4b}, {&(0x7f00000016c0)="3bdd583566dbbc8589b8e77a07f6aaef512dac0fcdea3f18d9a05f9dc58d07ec76b9093a5fb9907f8e6ffed4ab2ecf8c248fe8d0ea7617ade6f3828dec6dacc145be37fddac311c1a6d42609044d87554629a48138aaa56331e2b601f6d9ddb431e35cba", 0x64}, {&(0x7f0000001740)="718b60e47f2d59c10149c2294bfffd7e6bb3e00a0d0824ad8f7d322f10220aee9dcaaeb31d96a97cbba097407040a103f40d97a9f12c39e7254922e683d5550d852d2aea75f065395473763e72c22ea94209a322ed773138da41a06efb4aa4faeb1ad4150e0f40e3c474f4dd23fa8ff67f099fc99b72432df636f40df85f0eb7308851408bb98cdd457d6ed63ddb6c6dac", 0x91}, {&(0x7f0000001800)="c5fe771233617ea28946bebbb104ff7a43ac74c4dba265729c824aff5b3280cb732bbfc19263105601e6335531d5f8debcfb4d0162d01362c37e2561061cf08b4f920810470450686c98b4d658c730a2799f9f3e56712d18d5d60d97173b31bb93759be38d3e94491e8c04a3739766a472f4b2642c8619f3104195527b8376d9d575d55d2c8796eed3029dea0bcb9e018157932aa66e93a254abe3d7ac1c7ca961b257acb07855b80cb9362cec4bdd726b30de38a75556dd09b8c56b", 0xbc}], 0x6, &(0x7f0000001940)=[{0x38, 0x18c, 0x80000000, "95aa9d8f7f358e74c796d80c6f506f92a9afb275161a2f2ab2072a92715fb70a48"}, {0xe8, 0x0, 0xffffffffffff8001, "5a0aa45b6b771052421002aa3b948eb47dbf25a9e5a248e0cdbe474a7e971e890e5f8237f2b617de3e946b486e5f6c947d6bdf600f2ff78d4d470cb5aea9487d6cab58ba4e21d37bc2f36ed9c2f82719101aeb487ea58a48bf32b1178947be20f88f700810df9dd26313037933ca627eb0939321d022abc38a208b34baeba31709cb1d7d14f6036a00fb9edae58f5352c9d115e1ea814b8404456282bc7066d94a1a4ad0fe4e2bedef03547065a5917c18bca47d804385adaf39adf3d91dd6f1b75e9a5ecf02df68450e92698ab210b3474937f6c3fceb1d"}, {0x1010, 0x139, 0x7fffffff, "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"}, {0x48, 0x108, 0x3, "a92dd81c013bd8e02c27ae2f0cd1967225af8e66e10f29fbc12e119575474bf7b90d63ae5a58fb005631d79517a861dbb8"}, {0xd8, 0x19f, 0xff, "13a75fba9756d796abede8e25ff316901ead753fa0d7bc29ce58182bd0adb4259155b9a259e616f203090544d7b6417f275312b6dda3f7e1053f138559405d03325f09e5724c5836810f665d10ed9349cde7d2f40a3f1bd799ee9896f2a770df74b8699783ba3c61ebe1f395730f8df4ea90360517ce5ffdda8a924d58eb95f9ad5bedd7383f3899b67ae381cf5d4438aab53453b4beb3979f58e445fcf085f4411d605b7b9a530b5d439024374c06c5a7cb6a90eb1d553b58befb8ed139710ec37ef5477a46cb"}], 0x1250, 0x4}, 0x8000}, {{&(0x7f0000002bc0)=@l2={0x1f, 0x8, {0xc3, 0x5, 0x6, 0xfffffffffffffff7, 0x9, 0x8000}, 0x8, 0x6}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)="837b13899ed08eb2208c6f8cf3825c04f40d4a7b2294c9c4e760bbc7c42513efa26b0b554618243c15cea3023df7bcc7f35e39dcae71aa73ff1ac6798749ba2ff48e99bf6c05cf85d2202adfb684a499d7cb3ac7d39d4057932aac8c028c4d1d83e6314e54d6a1747b3deea1a5ba40a9edc7749f95760f6691cf62190cf0d03f9018495e388b78c9643e5e6f40c37d46131feb5aab5227fa0f3f731e5afd06c5d6b20c83aa2eda7fa81fbf19086e9831cf6474441bfb2c700b1877422853c2273cb65dab4974f95ba8c38bf6875d1eaa5755", 0xd2}, {&(0x7f0000002c40)="7ae7c4aa395d96ce31e8e86b7dbb5d046e78e5215a990c257cf4a11128ea7259cde5f2aa09b95e5276118d8ce047a343d6b3ef7a70b2e0807a7bf8546d34d1d19d0abf5b4d658c8d2f5a3d301bbb7988f32a3cea97ef21a9d34e0fb1d17da0cb8d631bf62231515c95f3bd1d2535cef456d3862c1a21651788e114e70518a52b294ae031d228f1f35ee35e302da2d173c08523b787403cabaf028cbd5ba25a1dadeecc4529f11432fb74e203d4dd66a39e7b533e4711e1406002871c3310", 0xbe}, {&(0x7f0000002e80)="9ffe23a59b61a29fcc62b9607822dbbab8840afcd2bdeb42cffacf16cde41c98c67172508f9e8ec1d830b589a0d52ffceec2e31aa66c2db88ac73f0b165a85d30746b3935985a3e34af6e2968e463c385d6894087d964183663b9d293053fc5c52bee112e08d4d42dc501cac7cf6d09d5e092af70f7f061e", 0x78}], 0x3, &(0x7f0000002f40)=[{0xc8, 0x6, 0x1, "e1c1a3ff70c2729a39508e7d891cc46c642ff52bbca4e4f3ac7ee636b1963dd18e38168484c95093635e2615cadbadc9a73c6c6ebaaf7f18b5b0583e0d27c530eb9b90925b648ffb8fb776b9db6b6ca15e1c745062d86c7ba9c4653c846c83724f0461bf9fa5f8c8b1e97241ea049be92c2e0cefc368403cb18cd84d127b6e04c1982afb8ff615b6f37d3032fd711e4d8451e64638a42df3274bbf1c124caeb789d44a395f53e0016522babe0c42af61f13559"}, {0x58, 0x113, 0x4, "33b35cfdf71be088694fe6fe9d6b851203994820295e16cef1399863326ca70826d89347493deea9addb82d7dcfadda12be9fce674acb591f097f1fd0d6a22a13937d3c845"}, {0xd8, 0x11d, 0x100000001, "181e20f7ca7642335522033360dd132722a050b0ec5e1bd2f0d6deb3b40b2596f23b05bc2c0c0774e46727fab37dfb478fc7bcf9870c2e879777106c160b8bafd1c4cd6054807937b8d22eec4bcf8e92f428f432b890796e037294f8d8b0ce517775697c76d65de026cc3a89c400ace18d760ba5e2acd43e95906ad8210c0f77fc2e5b1ea67a122f43473f78afcaa569d2cfc59a0b443fc9d3eff334844cc61daf835b82cfa88b526ca0752431ceb16e99d590ccd5c793a1c7a32773135e84144ff1b2cdc785fc"}, {0xd0, 0x10c, 0xfffffffffffffff8, "8ef0ccf450e83d687ac5121a63421953bb8dc97349484e4b6c40baabd416293655662094dfbff084c90e67f05e8f84296f31db52fe3c110e5ed14d4b69b88c5ea6645c3027ded63cd3b844b7c719b05153f44c0d3f1cfde5d1632cf6915c42426e31d5598b15316cf3e62d19942074f1c549b9fc5a4eef3a7839b46b86cefd490b145bdedd9d3da31d01231707747285a1a6da686a27b64092aaaa7c5c7a1fe4dad38f9140b10aa9ce09a7f77eaf2cf9432764e4efd3996e812bfb6b7c70"}], 0x2c8, 0x4000000}}, {{&(0x7f0000003240)=@nl=@unspec, 0x80, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=[{0xd0, 0xff, 0xffffffff, "e6606ccec3b9ac263b98cf8213f436f2ab4b61681ae74201a6893c526ea3559aca436ee2ffc5f61b0d95725aeb72b9b1d6e5d9b0e8069d96f4f14e0f4b7ab6221ab8de4788808cf7af3ca29a8816990d53608cb260f75f5136b77d6b64e779700c93be18d9ef69c22411f8196e75c7ce5a4fe0fdbf639385de62ab4b8c0004075afe2e7624e939fa9f10ba60126a3e11d3330622d266f538d3a62bbaf65eb2784b464440af59d5543be4e15776154ee71c6a02dfd12011f360a75061012b"}, {0xc8, 0x13d, 0x5077, "9572d1c9bd25f2c63ff3b63daf7112776a117fee4206f62b426240ec3a5251b99e51ff8faf8357a4963ad9ae4dbb50feb535d01ccc06c27569344fdce3a4209ad3f376219482c0d5c468b7f04414ee25d89110615d5e7e1a52c82661155d12f53a624d0d222491db8b819b80e4f528d07186e826d35c119866a6763aaef014d2f8982560d368398433e3e32c6179f39927f55d2b91cae9fcc961bf60869dd6af79e299b7312ef257855c4b1cd44ea7a1fc00a474c6"}, {0x48, 0x111, 0x3ff, "8566dfca65342894756739549a0292577901e20d1b1885e3dbe77d22973eeb6be3b30c322cc02fa2ac8e81c73306b0f64dc618eb08281a"}], 0x1e0, 0x40000}, 0x3f}, {{&(0x7f0000003500)=@generic={0x19, "c0f08bb1cb228958ffe2514567b7043d6f3909c002b2e24a335ac9d5f4754d779cca17f08e5dbc5222a7b6f7ca2a37e0b316b7e3073e47e07b982881e15a4408de6e24562b43a1fd1d181232edcf07901bd434e8889459bd0bcdd9ce1c8ddeadf739984391c6ddc601d734c7a2c00715c65774a7eb0d947a3e1af74ed07e"}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003580)="9d3a0e9067a774c79e2c307e444b4748bbf43fb031af9a341f83c60ccfa25f4c94f1bd0e55f4a3a3e8a32d6b35fc05dbeb3e96ee4fb3c04165f13410a22f50224b65e6c10979537bce36e7d5f3ecb49261e48d317f4d710291f5f06ea695fb86a8ad8ff5ab26a1a1", 0x68}, {&(0x7f0000003600)="fc6e7e87969a36d5af726478082d22367e177d46480c502132a3515da63025b768e1ad935780e99fc8b412f54004bdb3fe497e1e92df143e96c3a2aa7018bc11e050566eea28e3ee040db423d2e68ede008974ec9bf4fb945d8d40323a1bee3b44dc087a07daeb9d156bba420bd871e185443f8ce7ab529a1348ff12c405117fcecae74a8b51e1e3c56c75842ed85edc99b56382a8725d20deb04644dc6db804cda3f6e91f02702e84b2fb29359d6394e76f8860366e948550128f0e184f724bec6ee5007141ce540b1c7719347f7324c9ec1af12dab5cc57e152210d1d9cb97aa4b502064f544fd0b22dce28d000219ca025565a72b89d9eb5c10175b", 0xfd}, {&(0x7f0000003700)="afce2c33d136219028acdd5493f90d59491842cc2f3797367a243812462284e61e47b93db37f91b701fd0986853aa58cf1bd7baf25aefaeb81d5cf2b7a24dfa53120e0bc0afdc3c74bc9f063da12c54b92a7835d1ee1", 0x56}], 0x3, &(0x7f00000037c0)=[{0x58, 0x11f, 0x8, "421d16e485a8c931461f50c9c604cd932bd3fc75f6144d0c877390761ef47d494cea5d34e547a2c9e8b87b5ef76a95ff3a1aaf9e36e8132c7cf90396bd4ccc1a65b0b1a5005949"}, {0x60, 0x116, 0x7f, "46122ba1cb0e5b226c6a250244bc48be03ed425cdf68dc35dd50f9e4a87d430308ac1a0cf3abe0d73f7b3a8f448f9918b8f13fbc2f1a5ea15892aaef49b9bd9f03d465b396a481b931815d"}, {0x1010, 0x11b, 0xff, "c56726522e78c7c3f430e51c4f813c3627798f451e1db76dcd85852ee57a78375794884d97db88186653c07b508454bb227b80dd710e11093c2b6ace47d2bc70144e4cc71b6764b88db873716a92ebd70fc1b9102e19f854b7251d6b681d0a60e5e68f626a3053923f4988d6056f626bd6b9aa749724141472c42909098e1045268ec09c1310286128f4f887f212e1a5c95baf4dd880281e08b3abea0ce5130ad703203239670f60440f32408c848ab3fa0cd9152619f42ce85b7de6e4d6e7cd03f1ae648f2c689b581636426fa36eeeb4ab1be12f33ce25e6ce18909122843eb3d9309d12ec01f63896a286010c8817a62635a0d969bb2dcd878761dccc41e44e18f0e6777f0cb522bc4b9aa90f94a92ab2d60b52a0ba9617ff4d5d358401b05af065aa374bc914334b9aa73eb75344cf02dfd86dfcd0cd1672759c5dde8556d5ec7dd543193a9ae328887be6a2d117c7c41d78faed9d8648b66551c6fd8bf93158dafbdd5d518f8b314a567eae408f47032d49a01eb0e54a4047915c8baa07f8c7772624bdd30e00f49af93483b2f0eb58aea0591d0eeb2973bde8ebcc24a6f05b0332abf7619ec810a3c0c84b947a82bc2608797c852645cab7fb72d2a3db7dc010a6a951ecf1a1df6fcbf26c49774322e62caddc16c5cf3d5ed80c585ce94dab16b0e1694d7dc31cb62bbd0d1c88d47126fdb8779db39b39f0ecf5c6ca4f14b3d246bb19b4023ff929527038eead4e731b35a3c03d0fa365182b03864471fa23977e8896a3c242320b4109165b412b9480aa39d06482067208cac29c59abd679f229922a9cd4a17b250c40de98b6d83203c67365b6a5d3eec37fc01d80977fed174bf1c2b091b72ed3b5d30333b373c19ef81995cb1e15105f30d0f6e69724cf50c525293716380abb9716b147cd8279a5e83535c610396bc3e1ccf1f4c73f371fca07bed59ba49de4287bd7a43468a96c324ca34c19c4e67b0cded3ac7960121f9139cc0fc470cda1bd6bd43e7a952735a8cabd665fb5cae9785a03b1700603bffa3cd63d3ebac8c550eaedfd2545fcf9ef30098856316f07c311d018f38bf4a35f64c8d8e1c2cd797d707f7ac45cedc8f95fb0469d5dbddf0d295705f29ffdd7aa610b5b9626d9a788ce7174f91d1505c6b257bc8a905ac39d638e550f1a5c3293973bc69d19a9f809d64ab4ffd20b1acb934d58695b29dd02d981c2e6cfc8197a45801ad8611f886d8e54c7ab4955f969ecab59c890048c0939d4b48ea4d96bd544e2aafe6ab0b89de7233ab59a04a8bec2f6f64d89aea618769c081cbaff4ee9026fcfa938c1e6a9849d09bb8b5cb01ab7a5451e5109eeab2507d1d58d42a5498f9d32d74a0f3cfaba1f63f37c8d5bc0afeab15904b75ffd4816dc36420c4e59659ecb67544fc31dfc0df39dc8b4a419174ac266b277b1b11d0f94ed81482fa4e692a85166d530d00ea54a9ab0b2fd1ddce9ee1dab7ac9eb4f145bf7856d93714b4ca1e77dcd89d27972cf4815862a858777d12bd484b1b4e02a5bc2a434c5e630ffd580a7478680aa801629804059ea0a34ee61d60995edcfa19ac8b2a452d6e5474f9863847b4d3ac72f115aeafdbc3b838fbe3d7a4b8bf3d3c6c1cfe0d481008f6e9bfb9c46951f9415df232583a5a5a865b071727a7b3a40cf112f8c2d3ae95eca98c9aebbe7f60e52e04fbdc6c24eb814a398fb40a6c6053588a9a2a8a1dc6836fc4d25bfc1ae59ba45972b3bbfdf5bbb48e8aa3f0cf0a1b787c2cd5280e9e601ea63bf4f76af8fe35eafe7f4848f2cae04d217318f0ff1d433d5e77eacd7ede6670497a02c88c144fd97ee7a7b4732ab6c37e2e10fa4ba1faaacd04337e9ebad5eeb4c3735c08d8ef01fba155e2fb2ac57b16646e3d52be3d54cd580665cc4b68bf399d59ca1dd50a1be9e23f6f0b85607efaf0a9750c274a21e24a0beb2e216b12f5086056d4a65f6b57b9eb1872be5ad554291a5a540bacf0e32955ec8961ab597e5031afd68cce4d6d4a786d9bc1afff6be39aa2374a32f3c55b81ae06b467e59697c51c5ee3fa11c4a58c18741c825c1a6b19469b9f421a968380c42699076c32068cffb8eb07edea20c944d3531c701d92ef89662e85f1e020080a2895a26f8a14826302b56518b6a8b1477df338a980ad8c512b7ac9d5efed1f7f35ed6e6c6b9c0b52d18ac608f850135511d0c3871f242c5335997d1403d380a187a0af67b73dc9c2e07ad9b380890f3219b44b2164b4a7f4c9cc4d0fc6d147bfcfa1900a7758342f0c9c8ab8af0ee98b11e2b6803a54af3ac36cbd1eaed420a899809bddc1f80193c9b5d24541c417ca7a100c12bf93cd61ac841eb6349ede9fe2812627ade140b187489d05538b71cd699c2ef3a4999e344582a71189cbbd786af3cc1467d3fe42a399e24709540c24ecfcd1c87ee574cf25fb7f2466e203d09d7d92baa3df3eb5c98ca4e0ca6257390d227cef10eac5ca3c14f7f5fb2240d24bcd12c64476e4d8cab420b84a2a8a5280739cc98731c8366003c86ddb9a474734177fd3954f1ced36598fb5b25c11faf08026ee2075f87ba62a155033726de9e88195a5d30b4f11fee9e2efc7bfc1766d4c3f2a1bb7fcd3de58e6f688b8979d92386a87165c1fa0f2ffb74b8f1f2a3a8abffec17d9059233c5fc9d93089cc68697852fffa3d1d3b4f03363bf65688a3c3505409fbd2e24d35b460af598542b675500eb0e622efc64a8b960a679a81c9caa80c4c8c0c2ea36fb4ad5a5d69f14e18c24b68810e63bc195fae8103c93ac8fdcb62c71511490a79edbbd481153f2a56480fc6c0ef4c59657566d6ee520a769ee852f6e3ce2992b1767d980a105ed0aaa88bfb3f429a9c470a625540639fdc93ebbc8eb9df192c22fdb7e603cbc88116e85933515c4e172a6a158d0357a2cb63b6738a4eae85a88c887416493310389407ec68f4ad75b156be180f80fcb7414cf501b338b284a53074dbd31fdfb9ea0c1fabb93eae1aff994371adaf4a000590dad1fb24a2ad3b2bccd5a7389e9e5027e91c5a5d88e33abe0258b22953eeee392cff7224168052d4cc273a0f76f8104472c81b37c595d2b80f77e12868c76c7ac07163659e27a992879b6cebaf5a416b5ab283a4c03b3b3fea7d5c6936e50320df5275bd30392718d67e4d652461c459999924bf16a512c04c330da8a8dfb94a526acf5a8e50f8ed742bab65cce1fd07c51ff0e8247fa0db5e7bd1138bddc86cd9ac2094dd86e02eee2bfc210ddbfad060002452b821ccb60544b14a0ff0b58de8b0d828d61b6412999e8c7f17383048f67117697d544f3521793e88a07c2d6b00e70d53ba67a1c65ea41331c1def30e5fcb462a2d9b4f69612d15fd9a324a5da8d932faf6d48af351a14d47f691341d00be673a319fe384ab8287f34a998ed05ed73cc056049954c3628c34973dd77fcec2d27d73388f3cc7abfef9c0fd656c739cd3c334a9643baf0600a9c0065994d54797bf854f2aa949d32a7c05e9d5015a2c2013fdf3778b09c3add6359f5e8b83cf4ca2da7b883a5f027493fdc83514ad9394f7a153dad720eb9c92eb6f5519491350e24a549b74737e9335e786ac9514119c0d06c7df5588a8c93b14c9e69ab8322d2ef889a03fcd7f2fb55bc6d9b633271545abb29baa71e9d5d6893a570d9daf81c7753f70e979607cde799dd7289bfd54d5830015b5a2b9834ee77126d5e70c264fee56bebc38b3f476c1ae62eecaee75254349be4d115730e1c62b4932a6dc3a8f391dfee518eeb4a4eac1f4fa809afd05bfea1c7c08b1dbcb13832d96ccb7dbea36076b577cc2e388fbe87acc71820b84f21878f4189acbcea3baf975083cdb71ee3432b7ad4ca55aa9c5973466c06c3a6cb06ae78ee10bb90a5611ce1db479b90728a189e3cbecf1c513c88b8af5f363332d4044518911fb9c1e1ca7dcb8db6a9d841bea4f1213f55a57da259abc88ff19f3e7231fd05a329038f2075797b65c483207b9d2d502002017fac5ed2dff6d682fa276ae1ae454172020635f67e63beabe72d7ed7f827ea64284a9785d0a00186e1ce51514d639c06695ac389cd5794533eb642173dd1f2cafedf0720790f3d6ce75acd824d4f252bc7ed2eeff412d47000fc381d2a140d28ba931e38f05009aad209883a55dcbdd2b0afb6ba7f47a69ff1f4df5374a7c4730ee3e8dca0b8651e7ddba0b8ff4a557eef6da87b7bc29204171da112e9855f0fe08924e3b27d25669379458fa84abebede297e2de0aadca5045067a16e45652993660a55a74cfbda08d64ec6ff0843f9c83975e5d73669bb26a07f05082e2e9017a9044b08c100401bfbae05fbbd3fba3ecbf6d327c0e3e34ad20f63a5c502c753a5c2377abb44fbfcd017d70bb37af7ea38e9539d0c9e8e069f18912bed22c5c34ce06f46f979fc595a3c37a027dee0b5bcdccd94f4464b3e29063a85acdc07d0bb9bdd4a9dc411489741cfabee1e9134a9632af36898d76fe432c07da30c93c72b20a0434ecefd2ba71bd67a92a7b299946d165467a401b86a9f8f073d759b453a6f8b07d778a8fb4c1f7788621fd6e06d53aa419e9ed0094066df006b643caddb1c90cdcff72ee9e933142005e814a20bf7e78ca60e0455e50731d9f7f6de0d87322dfe3ba97e6dc4dc845e1f7e9703ff3187134bad718f7fa37cff8ec7cba69051959e2658f04b672a2bc1f269dd27672dd20226a4446b96d0795aa65a992e8538fd97ce8ce992c2c1201f366b63e435800ad30a2dcf139a0cd6a72805b77fa2e8488ad13f72924cb8a9b1e4af039041186e25efd1babbfd4b5d76f6cc5c820f68a55d859384bd6f270cdeafb06b27453416420e21e58de6c592f0adf09d3d927c4220c9eb92fedac6e005bf150e9afd219e0402fab62aa97f14fe65f7cffd30193eb755ee85d009bcedf3a444dff508c43ce39b2ab65f3e645d497b2d1eb6e78dccba7f0b852bd7c2b32f26972c29dbcb10a3a140f72b22065d282e2ea3a7c143e7389550e10edd1f5d0e97caa78ec441b274a4db9b724c18502b22928d7bebdcd14079692a4d2f38a2c7540db6384e0bcd58302b6f0eec7a14b1210249674b4bdf4f278c38bdb02578c3186438c2acb218a87374903af9642f66845ffec9ee8a2857cee536a562600cdfeb22cdf1f588bf7ff38d65131251c0d7df74c6ad948c2130262fedb66a03471bb6b00b2779e28f654168dd57cdd2cdd2e0760311ea7daed1870a1db5a5bdd0456ba4dbd626e61a4ebf57f132176cf1ce2785d85b7a6c67987dfe531167e1203bdc45ad8cdafead32fda02cafd6444199cfab159a90e50edaa8ad734ea10e0f4c670c61c71911813553567a6a5d9740563bb95f57497c0e5f719e6c9f46f880f0d0e0c73715d7974edc97094bad6d269b84320fe1fd504889ec4dd7e792c4a0b24bf972face961d70de49736bb30f380e2c90ba9254dfd99c505e145841019a1a9a35a4545e33d7865e2ce21dc4e2ff70b9f772c0f5d9b15451f2e154167dc24ee41c63fefb759e73044074b548df5f9aa6b6c85e438a26e6d7e4d8cd3e3d12b340bd9c2dda668e47d56a9a8386e35ded764fdf906076795ef12bfaa018eef1033d445a3991f550b9ff561eb7c27b65f94a22247dbf6f70ec8e31ea3debc11dd67d2b151974e992566938ba515cc458160838c8bcf47f5b32c6825e9bd7e222f1493bd35bcfa7281cfb8d3a591333febc3c054af4445b324a21e55555303e9d006b4a535d78e880105a28c9161e5af6e5e7a0def851538fed3c626713079b61ca"}, {0x1010, 0x119, 0x6, "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"}, {0x70, 0x119, 0x8, "fdb69898352f94732c487e61c2631bf89940d91ab4b71eb0a56b5f3c1fb0fd6e59d3354b7b086370c0b2b3bef68b8d1d3977d13fb03f679e3137a5f0c9dd16b261ef611d88c272c0f24c8fd0136883ced03c2a8a6ee5d637cf4f755b7838"}, {0x40, 0x11d, 0x5, "c27d071c9131f0478aab210c381916c5c79a56cfc8eb7c92d15e0981f5ff6661e27ec9e4d0f2f7bae155"}, {0xe0, 0x105, 0x9, "12f30f358e54e061a61cd9365c8dfd7d93999b914542ceb32a490b77b96119be9c279172084740e2df66d244e3b23cd8edbafccad336cf0d43db932bc1ec9969a835a1e0549e833d0d78ea6fa2c7ea97c5ebafc04ec401635a57e1699f148b893eebe67d8d4c4dc8aeb7c47f194ba4dd0f44b6d47b6336930d8f2aaf19a54eabb107c400149710f7625dd89779ac7a30b324979471b15be9623d3cf5a24824beec1a3f3eaa107981058a55c95234cf13a50fa571dedf70f7f7cd42811e19b2e4e445435483478f5a9feca86d"}], 0x2268, 0x4840}}, {{&(0x7f0000005a40)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005ac0)="09a5ac6fdeb9e3615f76c450f9fd211c07e73408200d3f81218e71123967ddf048c26a5bb27793307a7427e5f8268e19e8d5d5f544fe438521e11f3dea8ac7c3dc44e68ee5a0c0831ca9748cf2086bbad02bbb4f54134a7c9d9f976169afcffde2c9f12cf3db7f798671d4ac9136f974f425a673e88426915f9ec1c219c3699aa58e", 0x82}, {&(0x7f0000005b80)="db0c446748fb5600fc302af87aa15ca1cb677e2cda52331ffd3908a782273104ff9f0aec52f1bd160015e617454e8a9cae88a4f400518f5a0897a9bb0151ac643261c52f31cfb414048d93bd6d859daecf8a10376ea3287678a5278b406eca9c7b7448ff3ddc955d614412be9d4ed833bba8eda19d3f397cda925ec24573e445c0f55702b2b292da9ca8ace9a7d6e415ce83c07811d7b3b11786e38fc8da", 0x9e}], 0x2, &(0x7f0000005c80)=[{0xd8, 0x116, 0x2, "7f92b9d10eefccfde8c20a373f4cd67570ff98734c1bd5b71129aae80c9700ddf30aae293b70886e993b46ebfc8961b9368c9dcd1df71a6f945978b6a5f09ff16b1b1437bfed7388bcff288df3dc154e2b8133706518c02cf0e40491cdedb2a51c47414f5d7733d5d9504297e3dc96fc3d5d54997ab8227af6ad89022c40159bd24413cb6ea7d5abcda69041540d8ed186e7167534737353b54e1690bd62ef8b25a06538ee714dabadbf1b02ddb244583d86d1428cdfcec60be9075e0a8534513b591418482c7c"}, {0x28, 0x10c, 0xc0, "fb53636ecd84350ff095653dcf9bb8e7bb0803ac0f97"}], 0x100, 0x40040}, 0x8001}, {{&(0x7f0000005d80)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e00)="355410430db11eb2643051218d9d2189a80201973fc0b04ed11b85a1558ea1a68a63e8670c9dcffe33ea35430c199148ee3eadaa0d9f19a9e0a792e0949538625bc6ce8bcbef68e8afa1f74f1b0cc5ea2421c632b4eb3aa24c2dcf8f5990caf78cab2de20fe094dc4965434b", 0x6c}, {&(0x7f0000005e80)="c2b78db267e4f755c112571738d22a23de8cff38ef4ae72e467f7938c63ac801b378f9cf9b9cc5d312157867d9f958077d6b5a3f404432d895a603c0183207abbffa9a289ca90a0ba9193e090498122db7796c5e13b85219cefebe6974bb3cdbe639e0b3a9db0763cdd6c469f82c0ff8d1ec644cee6ac8dc4166f571c799ef5f9f8750a8da3e39ab000913662fc9d19a9495da846fa8c4d5a3c8eed10781aa2160ba0e88ccebfa52bbf19ead", 0xac}], 0x2, 0x0, 0x0, 0x20000000}, 0x820}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000005f80)='xI', 0x2}, {&(0x7f0000005fc0)="b6eacd16e1d5e79c4ccaefa85a236fd69fcbb5a409088ee556b6585db8f41597dc7a98ed51aabad9379cf18236e9bc94124e89a24ccbf616dc26596ebd013ad46953974f2e1890503fd56357e34e555ad05ffe66ea1a8a0ebc29721b8ffaa037f7ddbd70eb45a8062ba24f172d35ac6a35b35df2c4f61909", 0x78}, {&(0x7f0000006040)="fe24c5adaa9cb87708b1e6e99aa3f4c904e81c4e33a355cb850157a2413545aeae00fc8d38cdbb8dfde6758effbd814a0d61cd4f56e71d4e5b191cec54275b1b9a1d72529c3a5fb774890082f74f7add479c26589234b90dffb6ea117171b5fe22d5eda9f3cc9c24d1d6f63c9426cb22947777b561ec3bb97f87cae13313688387184eb8954a6e9b2f03c0c56f51c37c042b438822a12a7c3401d18d0b455b1d16b84118a3527531a1fd7cae", 0xac}, {&(0x7f0000006100)="79c4920d0558a58e994a5181fcdb67d4be7b2a38eb54d4d3ffd8746751986c6ac700f820e9a1e106229683184ed35c5867ac4521fc00686f78a84792ac6ba35262d57755c82c03e746a6208d3df7223868393b4efbdf1e20eeff3ef2c6a862c590a38acff290b97d4d5452172a359d41a18bbc75cfb5179aaa8c97586fdb145f688d3a00347c82b5e9d47d60ad54398683fe855b9deaf2adf060709184c64d7f63990678b193e06d384d1a8cc09b2a57259d42364ef53c3fc5b6", 0xba}, {&(0x7f00000061c0)="150a83e2b69c424cbdab1fb5f3d0945fb05062a709ce582a5e3df49f87564c34da60226154747c9ba700134adc96f9318d0840221c8c7beb6361dbd67d3e1438bcd516f5b2ab93c5874b174ad469eb4db64d27dcd97ea095d244a0e0543bf02e288f53342577b77face06b9662dad85c73e26ee3107d6799a08caf1d036c6ab49b9e4c00c1d0b5f89bcb1e1481b0d6770321fbaf1ac98ceda4a69cd49750da66749314ba9f23f8e20e2da8c33acb3508a2cebc344ea5c4a45ce351cc7c6de268690a009984da11d09f14160195a722672c04867bf787db372b5a4025d41a2567d8f7889db03431c5d39e4fa0b457899bb98df9", 0xf3}, {&(0x7f00000062c0)="b3224d4c5875ea3403266490f35b0eba906af24a08c5c60ebb36285bb832e3b2297a1978391d9c685f931c319a6f08d71dae127c8b4fb8a443a05c367bbc7fc6c718d507b787d3dd18f18107e688bf42e50e201d6fda8c674f86a971d439cb", 0x5f}, {&(0x7f0000006340)="922370e820cba680748170bb54503302820dfe20681f1d23419113da4c74304dca1b7c9b9a229f48ad365f730e53058a3acb08e31ed5f976faf6bc63b902e8584a10fcbf11fe5ea2f4bd9bbf4227cfe5933240e626194db6cd49518fe5d70e4cb7e12c8038a11dcd740d96bd2c6e8f66866306e74f95bbb5c5c172addfa6d711380f8dbf4927", 0x86}, {&(0x7f0000006400)="7e665bf24d4f083a13a0", 0xa}, {&(0x7f0000006440)}], 0x9, &(0x7f0000006540)=[{0x60, 0x1, 0x98, "dfa61e31fe7f1e9d08575244dcca9aacc7015e39c4a6317f17848946828df5945d1e7d974a88c3456ce3e6a6fdcf620d9afc15b4cda2b499f5647407a1c06cecc04a2809eddc9915c2f8785af8423f"}, {0xf0, 0x13f, 0x3, "4a60e226f4815a65912d548bd50dec1232b1d963b9b52a56d0d6287989ac7b923f76ac8576b453f78364f2674fc80fd84ddd65583194532c51ee597bff893f68eb15a18621320db64c11ec6e0e4dc86fa3625bd129fd4b14ef1b99753de2bda22a3313942217487546207e77079c57bb2c23788e5b11fe90afe3f0a73a930830f235800953ba4a575412c2337d949f72dd56230f6f1f9e56af052e81257f3bf4afd7e8383720c8cbb09ecbffe5d0e13e3e8cb7c61b14afc100bbb36c43cdfbae272d97161aa96ac843c440b65a2954285b998e8a3c7f86a99cd1"}, {0x100, 0x84, 0x548, "ac564064cd272a47a6f16021444ae5e296e75a2174761bc5a750b82a39a58603430f333b3d5b6183255226a834b0b883c0495f373efe88058a6bcf75cb184847876a463150a75b8d0ecbc66529b955af2eff20722e16e1e5df056539364985d533377618bde49860865bf02eed71b9b627214bb70d63d35a93144b7c9ccf7dc0965fd7edc671e540af28547cb4403a8a0659fbcaeb38e921d6a8be13b0fa59abc60e56fffb401d42fcfb189edf4c30444d10757c3665ece983da16350dcdc192144bc470a9f564ce27efbd0f5184d69615022db0d7f41c98206b0df06738e123cf9778e0dbd23381112d14e6abd5"}, {0x50, 0x105, 0x9, "8d38e858d8b18f0d9028022df6091d505526a0243a997eddedfe0c181863fd380e3b32403fc7637ce462b4846278c6bbf79041fd7f2c98df4aa975"}], 0x2a0, 0x48001}, 0x3}], 0x7, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f938c0700000079732f8f98d2c7528425626c63725f6578706900000000000000000000000000", 0x2, 0x0) ioctl(r1, 0xebc, &(0x7f0000000100)="cd3b050b62c00d5d2497d7bfc826ffa99200691d835aa4f4aa74b8c44e9d5442579702c5169274611614c0a6d9397da41ac7e124b9f2d998d9f8b37c0341e4b4d12a9fc6b6a1fa5f464e15c8601c4d54caa51b59dfc684e5e585c1579d8c06d8f3f7f8521f737aecadc0428d436367956ee754f4f51343287e1c7891b2c6680e5314800a0bf42f0be4a5bb769aa408d6fc2e79839e8241a052231ef569de33e753efcef7731d20f8ed6002565ceb38798ca436dc4331fb570d9816eb91de7fcfd0974a61eb0d") ioctl$KDDELIO(r1, 0x4b35, 0x800100000000000) 13:43:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) [ 2569.080639] IPVS: ftp: loaded support on port[0] = 21 13:43:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000480)="0a5c2d0240316285717070") socketpair(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000005c0)) [ 2569.136695] IPVS: ftp: loaded support on port[0] = 21 13:43:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00)\x00\b\x00)\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1d000a00f1fff3ff00000c00080005001720000008000100647272000c00020008000100080000000800050096060000"], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'trusted.', 'drbg_nopr_ctr_aes128\x00'}) r4 = accept$alg(r1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) 13:43:00 executing program 5: unshare(0x6c060000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r0, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e742f69707634af76732f736c6f7070795f73637470000032c1646f33", 0x2, 0x0) [ 2569.367955] IPVS: ftp: loaded support on port[0] = 21 13:43:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73d08d2537350cdc217df676e1f46f37c0de9730b4df6d6c76ab9df09b582b6bfa0a812ef9f92ad6d81bb150c9c36b8c1abad2", 0x33}, {&(0x7f0000000200)="64f7135445cf547826a9c59b54cf72fde6644e00cb1c56f101f2c87d05e17e47480c86d0c50fcefb2de295f3b968832bcef24b776aa927180f40c920eb8f6d38ac86d2d99101fefae59778e4533d26cde28d372d1aa8504d8e7f9c5924ecb9d0f3cc8fdab1020eec5e6b9eaafc9c316850d05990410bf9fc1b556ea1b8a90a3025b5ebaaa4ec6a1ba2e3e1e44761fd35680352b2b0718246289625de93a3e4e33c75b86704775deb6e9a112df70d57f872cb0ba0af6f11122921fd175351300074ca8c48ffd8a148cee00ecf8404d3f548860c6dbab43cd52494c6e7b0d58bc469aee9f88e566736f2fa5d77360a8877b31266c6fb9e9c7e31", 0xf9}], 0x2, 0x0, 0x0, 0x881}, 0x20000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x101040, 0x0) fcntl$getflags(r2, 0x40b) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000003c0)="5e967b") r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x531000, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000140)={0x80000001, 0xf, 0x4, 0x800, {}, {0x1, 0x8, 0x80, 0x6, 0xebd, 0x1, "b225c2a5"}, 0x2, 0x7, @fd=r5, 0x4}) recvmmsg(r3, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) 13:43:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xf000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:01 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80801, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) unshare(0x44040900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='vboxnet1}\x00', 0xa, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = accept(r2, &(0x7f0000000280)=@pppol2tpv3in6, &(0x7f0000000300)=0x80) sendto$unix(r3, &(0x7f0000000340)="bd7eff7579630a944fcb4130fc5f3318691b21eb2904c146cfb6358ee2d158431981a1aeefc5f2a524f245e0398f5d8224db3a6e64d60db6d2c8a44dadd0bee7e26d9d39836e928181fb6630f53ed0d90661f23fc2908ea94d2609dfa1cf3aefee24a183c1bb0a9725351a9eebd0eb0c03e3b8eccb95b3ca62ec640a75af9c9a69e3e4abac81c3889c00d63f48f3ae0dc741138a306a377a03d6428b5ffa4087726ad6ad461d4fc145d98c72635bbffeae6a27686ecc579d93f54a92", 0xbc, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000400)={0x9, 0x7, 0x8, 0x7}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040), 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1', "60af854918fbb3438f4653beafae9eda487332"}, 0x17) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000540)={0x48, @time={r7, r8+10000000}, 0x0, {0x20, 0x81}, 0xc38, 0x3, 0x3b}) r9 = getpgid(0xffffffffffffffff) r10 = getpgrp(r9) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000200)=r10) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000005c0)=0x1f, 0x4) r11 = accept4(r5, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80, 0x7ff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="06002d02403103876247971ae3a20a62857170704354b2c0ecbe36ac2fbc66423dac1bf12e89f79a97826c98e9568f26b388bec3d94dd5981713ca4a5804130f34624b47a0d31aef19957ffa5737ab78a206871e63c0e230d17360904e07f3315fd15721f160874e9aa701060000000000009ed112b6f72242d009d111dc80ac7b1e722aed6ec715f558438e9c0c1453a5311f706f53123166e7e51f1cb7b739ede6dd7b947d8af5765744ee40fa") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="0355531a4e76691e18a1bb087032ad320f687fbde4c807cdbb20519016e02cf2912780be7b88fffaa75dba98db583d70bb6320cd3acf53b5bb85a4460b02112ba898e118904f6a785afc260cc58272907eb80436e5585135ea34c62cee20d40464f7ee994daa5cb61f829e39f04a6104f1c53eb414621360bc8917", 0x7b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000011c80)=[{{0x0, 0x0, &(0x7f000000ff00)=[{&(0x7f000000fb00)=""/237, 0xed}], 0x1}}], 0x1, 0x40010000, &(0x7f0000011e00)={0x77359400}) [ 2569.868697] Unknown ioctl 21664 [ 2570.189678] IPVS: ftp: loaded support on port[0] = 21 [ 2570.245763] IPVS: ftp: loaded support on port[0] = 21 13:43:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x9c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x4c, @ipv4={[], [], @rand_addr=0xfffffffffffffc01}}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x2}, @in6={0xa, 0x4e20, 0x100000001, @ipv4={[], [], @multicast1}, 0x7}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x8, @local, 0xffffffffffffb19e}]}, &(0x7f0000000200)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 13:43:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x10000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:02 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80801, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) unshare(0x44040900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='vboxnet1}\x00', 0xa, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = accept(r2, &(0x7f0000000280)=@pppol2tpv3in6, &(0x7f0000000300)=0x80) sendto$unix(r3, &(0x7f0000000340)="bd7eff7579630a944fcb4130fc5f3318691b21eb2904c146cfb6358ee2d158431981a1aeefc5f2a524f245e0398f5d8224db3a6e64d60db6d2c8a44dadd0bee7e26d9d39836e928181fb6630f53ed0d90661f23fc2908ea94d2609dfa1cf3aefee24a183c1bb0a9725351a9eebd0eb0c03e3b8eccb95b3ca62ec640a75af9c9a69e3e4abac81c3889c00d63f48f3ae0dc741138a306a377a03d6428b5ffa4087726ad6ad461d4fc145d98c72635bbffeae6a27686ecc579d93f54a92", 0xbc, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000400)={0x9, 0x7, 0x8, 0x7}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040), 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1', "60af854918fbb3438f4653beafae9eda487332"}, 0x17) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000540)={0x48, @time={r7, r8+10000000}, 0x0, {0x20, 0x81}, 0xc38, 0x3, 0x3b}) r9 = getpgid(0xffffffffffffffff) r10 = getpgrp(r9) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000200)=r10) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000005c0)=0x1f, 0x4) r11 = accept4(r5, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80, 0x7ff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 2571.052098] IPVS: ftp: loaded support on port[0] = 21 [ 2571.054129] IPVS: ftp: loaded support on port[0] = 21 [ 2571.111350] IPVS: ftp: loaded support on port[0] = 21 [ 2571.838650] IPVS: ftp: loaded support on port[0] = 21 13:43:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x4, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2571.928589] IPVS: ftp: loaded support on port[0] = 21 13:43:03 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:03 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80801, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) unshare(0x44040900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='vboxnet1}\x00', 0xa, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = accept(r2, &(0x7f0000000280)=@pppol2tpv3in6, &(0x7f0000000300)=0x80) sendto$unix(r3, &(0x7f0000000340)="bd7eff7579630a944fcb4130fc5f3318691b21eb2904c146cfb6358ee2d158431981a1aeefc5f2a524f245e0398f5d8224db3a6e64d60db6d2c8a44dadd0bee7e26d9d39836e928181fb6630f53ed0d90661f23fc2908ea94d2609dfa1cf3aefee24a183c1bb0a9725351a9eebd0eb0c03e3b8eccb95b3ca62ec640a75af9c9a69e3e4abac81c3889c00d63f48f3ae0dc741138a306a377a03d6428b5ffa4087726ad6ad461d4fc145d98c72635bbffeae6a27686ecc579d93f54a92", 0xbc, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000400)={0x9, 0x7, 0x8, 0x7}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040), 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1', "60af854918fbb3438f4653beafae9eda487332"}, 0x17) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000540)={0x48, @time={r7, r8+10000000}, 0x0, {0x20, 0x81}, 0xc38, 0x3, 0x3b}) r9 = getpgid(0xffffffffffffffff) r10 = getpgrp(r9) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000200)=r10) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f00000005c0)=0x1f, 0x4) r11 = accept4(r5, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80, 0x7ff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 2572.214374] IPVS: ftp: loaded support on port[0] = 21 13:43:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xa, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2]], 0x1) 13:43:06 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) unshare(0x6c060000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001400)='/dev/mixer\x00', 0x200000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001600)='team\x00') clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000001480)=[{0x10000, 0x9, 0x7, 0x3, @tick=0x7, {0x0, 0x1ff}, {0x6, 0x83}, @raw8={"24214dc2d8e031f0caf3eb19"}}, {0x1, 0x3, 0x3f, 0x7e0000000, @tick=0xfffffffffffffff7, {0x3a, 0x2}, {0x1, 0x7a93da9a}, @connect={{0x31, 0x6}, {0x3, 0x9}}}, {0x5, 0x2, 0x6, 0x4, @time={r3, r4+30000000}, {0x7, 0x4}, {0x72}, @result={0x1, 0x40}}, {0xd7d, 0x100, 0x0, 0x5, @time, {0x9, 0x5}, {0x2, 0x6}, @note={0x59b9caa3, 0x3, 0x94, 0x1, 0x80000000}}, {0xfffffffffffffffd, 0x0, 0xa5b, 0x40, @tick=0x100000001, {0x8, 0xffffffffffffffc1}, {0x10001, 0x5}, @note={0xfffffffffffffff9, 0x7fc000000000, 0xa57, 0x1, 0x4}}, {0x0, 0x0, 0x4, 0x6, @tick=0x9, {0x6, 0xea}, {0xfffffffffffffdb3, 0xfffffffffffffff7}, @time=@tick=0x21bc}, {0x2, 0x2, 0x7, 0x9, @tick=0x40, {0x7, 0xc4}, {0xa3, 0xffffffffffffffff}, @addr={0x7, 0xf76}}], 0x150) prctl$PR_SET_TSC(0x1a, 0x2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x190) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f00000013c0)={0x5f, 0xffffffffffff6297, 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0xf6, &(0x7f0000001200)=""/246, 0xb2, &(0x7f0000001300)=""/178}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x1, 0x7ff, 0x3f, 0x40}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000180)={r7, 0x6}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 13:43:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xc01000000000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = socket(0x1, 0xa, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x5, "8ac03da8cc"}, &(0x7f0000000200)=0xd) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x8000}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xfe000000, 0x8, 0xde04, 0x8, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r3, 0x58, "a054892ce65e1beeb1ee4f988cabd2c7156d0dda3bd8ea5a7f9038dee74670d4c19ddd8b29abd561d40e0b4ae90fee0e6b5ec79235429d01ac4be0a9663abcbbd64cfa66b5e44c019ea3e705d03bacc07fcec93a3802da4d"}, &(0x7f0000000180)=0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 2575.235625] IPVS: ftp: loaded support on port[0] = 21 [ 2575.236445] IPVS: ftp: loaded support on port[0] = 21 [ 2575.266287] IPVS: ftp: loaded support on port[0] = 21 13:43:07 executing program 5: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) unshare(0x6c060000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001400)='/dev/mixer\x00', 0x200000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001600)='team\x00') clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000001480)=[{0x10000, 0x9, 0x7, 0x3, @tick=0x7, {0x0, 0x1ff}, {0x6, 0x83}, @raw8={"24214dc2d8e031f0caf3eb19"}}, {0x1, 0x3, 0x3f, 0x7e0000000, @tick=0xfffffffffffffff7, {0x3a, 0x2}, {0x1, 0x7a93da9a}, @connect={{0x31, 0x6}, {0x3, 0x9}}}, {0x5, 0x2, 0x6, 0x4, @time={r3, r4+30000000}, {0x7, 0x4}, {0x72}, @result={0x1, 0x40}}, {0xd7d, 0x100, 0x0, 0x5, @time, {0x9, 0x5}, {0x2, 0x6}, @note={0x59b9caa3, 0x3, 0x94, 0x1, 0x80000000}}, {0xfffffffffffffffd, 0x0, 0xa5b, 0x40, @tick=0x100000001, {0x8, 0xffffffffffffffc1}, {0x10001, 0x5}, @note={0xfffffffffffffff9, 0x7fc000000000, 0xa57, 0x1, 0x4}}, {0x0, 0x0, 0x4, 0x6, @tick=0x9, {0x6, 0xea}, {0xfffffffffffffdb3, 0xfffffffffffffff7}, @time=@tick=0x21bc}, {0x2, 0x2, 0x7, 0x9, @tick=0x40, {0x7, 0xc4}, {0xa3, 0xffffffffffffffff}, @addr={0x7, 0xf76}}], 0x150) prctl$PR_SET_TSC(0x1a, 0x2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x190) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f00000013c0)={0x5f, 0xffffffffffff6297, 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0xf6, &(0x7f0000001200)=""/246, 0xb2, &(0x7f0000001300)=""/178}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x1, 0x7ff, 0x3f, 0x40}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000180)={r7, 0x6}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 13:43:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x100000000000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2576.502162] IPVS: ftp: loaded support on port[0] = 21 [ 2576.619385] IPVS: ftp: loaded support on port[0] = 21 13:43:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xa000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:08 executing program 1 (fault-call:6 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2577.412380] FAULT_INJECTION: forcing a failure. [ 2577.412380] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.474796] CPU: 1 PID: 30158 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #362 [ 2577.482195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.491559] Call Trace: [ 2577.494162] dump_stack+0x244/0x39d [ 2577.497807] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2577.503025] should_fail.cold.4+0xa/0x17 [ 2577.507106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2577.512237] ? __mutex_lock+0x85e/0x16f0 [ 2577.516319] ? zap_class+0x640/0x640 [ 2577.520047] ? zap_class+0x640/0x640 [ 2577.523768] ? mark_held_locks+0x130/0x130 [ 2577.528029] ? find_held_lock+0x36/0x1c0 [ 2577.532104] ? __lock_is_held+0xb5/0x140 [ 2577.536213] ? perf_trace_sched_process_exec+0x860/0x860 [ 2577.541701] __should_failslab+0x124/0x180 [ 2577.545981] should_failslab+0x9/0x14 [ 2577.549814] kmem_cache_alloc_trace+0x2d7/0x750 [ 2577.554495] ? _raw_spin_unlock+0x2c/0x50 [ 2577.558706] binder_inc_ref_for_node+0x226/0xbe0 [ 2577.563466] ? perf_trace_sched_process_exec+0x860/0x860 [ 2577.568944] ? binder_thread_read+0x4920/0x4920 [ 2577.573637] binder_thread_write+0x14bd/0x2b30 [ 2577.578225] ? mark_held_locks+0x130/0x130 [ 2577.582491] ? trace_event_raw_event_binder_transaction_ref_to_ref+0x540/0x540 [ 2577.589857] ? mark_held_locks+0x130/0x130 [ 2577.594096] ? print_usage_bug+0xc0/0xc0 [ 2577.598179] ? print_usage_bug+0xc0/0xc0 [ 2577.602268] ? ima_get_action+0x7e/0xa0 [ 2577.606258] ? print_usage_bug+0xc0/0xc0 [ 2577.610335] ? zap_class+0x640/0x640 [ 2577.614084] ? __lock_acquire+0x62f/0x4c20 [ 2577.618329] ? zap_class+0x640/0x640 [ 2577.622067] ? find_held_lock+0x36/0x1c0 [ 2577.626147] ? __might_fault+0x12b/0x1e0 [ 2577.630232] ? lock_downgrade+0x900/0x900 [ 2577.634389] ? lock_release+0xa00/0xa00 [ 2577.638375] ? perf_trace_sched_process_exec+0x860/0x860 [ 2577.643856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2577.649403] ? _copy_from_user+0xdf/0x150 [ 2577.653567] binder_ioctl_write_read.isra.42+0x306/0xba0 [ 2577.659024] ? kasan_check_read+0x11/0x20 [ 2577.663239] ? binder_thread_write+0x2b30/0x2b30 [ 2577.668047] ? _raw_spin_unlock+0x2c/0x50 [ 2577.672231] ? _binder_inner_proc_unlock+0x3f/0x80 [ 2577.677191] ? binder_get_thread+0x1b6/0x880 [ 2577.681607] ? binder_new_node+0x8d0/0x8d0 [ 2577.685869] ? perf_trace_sched_process_exec+0x860/0x860 [ 2577.691359] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2577.696900] ? rcu_pm_notify+0xc0/0xc0 [ 2577.700816] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 2577.706461] binder_ioctl+0xaba/0x194a [ 2577.710374] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 2577.716010] ? find_held_lock+0x36/0x1c0 [ 2577.720088] ? __fget+0x4aa/0x740 [ 2577.723578] ? lock_downgrade+0x900/0x900 [ 2577.727771] ? check_preemption_disabled+0x48/0x280 [ 2577.732844] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2577.737841] ? kasan_check_read+0x11/0x20 [ 2577.741994] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2577.747454] ? rcu_softirq_qs+0x20/0x20 [ 2577.751467] ? __fget+0x4d1/0x740 [ 2577.754946] ? ksys_dup3+0x680/0x680 [ 2577.758694] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2577.763640] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 2577.769269] do_vfs_ioctl+0x1de/0x1790 [ 2577.773164] ? __lock_is_held+0xb5/0x140 [ 2577.777246] ? ioctl_preallocate+0x300/0x300 [ 2577.781662] ? __fget_light+0x2e9/0x430 [ 2577.785646] ? fget_raw+0x20/0x20 [ 2577.789112] ? __sb_end_write+0xd9/0x110 [ 2577.793188] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2577.798753] ? fput+0x130/0x1a0 [ 2577.802054] ? do_syscall_64+0x9a/0x820 [ 2577.806033] ? do_syscall_64+0x9a/0x820 [ 2577.810017] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2577.814614] ? security_file_ioctl+0x94/0xc0 [ 2577.819032] ksys_ioctl+0xa9/0xd0 [ 2577.822506] __x64_sys_ioctl+0x73/0xb0 [ 2577.826418] do_syscall_64+0x1b9/0x820 [ 2577.830316] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2577.835688] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2577.840626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2577.845478] ? trace_hardirqs_on_caller+0x310/0x310 [ 2577.850502] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2577.855530] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2577.860558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2577.865414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.870611] RIP: 0033:0x457569 [ 2577.873806] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2577.892713] RSP: 002b:00007f8cc76b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.900426] RAX: ffffffffffffffda RBX: 00007f8cc76b5c90 RCX: 0000000000457569 [ 2577.907704] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2577.914996] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2577.922472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cc76b66d4 [ 2577.929761] R13: 00000000004be918 R14: 00000000004ced18 R15: 0000000000000007 [ 2578.095260] binder: 30157:30158 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2578.114030] binder: 30157:30158 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2578.141164] binder: 30157:30158 got reply transaction with no transaction stack [ 2578.168448] binder: 30157:30158 transaction failed 29201/-71, size 0-0 line 2741 [ 2578.184918] binder: undelivered TRANSACTION_ERROR: 29201 13:43:10 executing program 5 (fault-call:5 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x8, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000bb98fa680265c89106bf3eb273e303250000000000000000000000000000000200000000000000000000000000fbffffffff65978e0000000000000000000000000000ffff0000"], 0x48) 13:43:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0xffffffffffffffc0, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000358000/0x1000)=nil, 0x1000, 0x3, 0x8031, r0, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) [ 2579.482848] binder: 30181:30182 got reply transaction with no transaction stack [ 2579.492587] IPVS: ftp: loaded support on port[0] = 21 [ 2579.495278] IPVS: ftp: loaded support on port[0] = 21 [ 2579.504134] binder: 30181:30182 transaction failed 29201/-71, size 0-0 line 2741 [ 2579.516753] FAULT_INJECTION: forcing a failure. [ 2579.516753] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.545759] binder: undelivered TRANSACTION_ERROR: 29201 [ 2579.575882] CPU: 0 PID: 30179 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #362 [ 2579.583278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2579.583285] Call Trace: [ 2579.583312] dump_stack+0x244/0x39d [ 2579.583338] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2579.583374] should_fail.cold.4+0xa/0x17 [ 2579.583414] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2579.583435] ? mark_held_locks+0x130/0x130 [ 2579.583455] ? __schedule+0x8d7/0x21d0 [ 2579.583504] ? zap_class+0x640/0x640 [ 2579.625236] ? mark_held_locks+0xc7/0x130 [ 2579.629394] ? zap_class+0x640/0x640 [ 2579.629411] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2579.629427] ? zap_class+0x640/0x640 [ 2579.629446] ? zap_class+0x640/0x640 [ 2579.629465] ? print_usage_bug+0xc0/0xc0 [ 2579.629480] ? find_held_lock+0x36/0x1c0 [ 2579.629509] ? find_held_lock+0x36/0x1c0 [ 2579.629537] __should_failslab+0x124/0x180 [ 2579.629558] should_failslab+0x9/0x14 [ 2579.642074] kmem_cache_alloc_node+0x56/0x730 [ 2579.642098] ? pvclock_read_flags+0x160/0x160 [ 2579.642120] __alloc_skb+0x119/0x770 [ 2579.642156] ? netdev_alloc_frag+0x1f0/0x1f0 [ 2579.642186] ? ktime_get+0x2c1/0x400 [ 2579.642212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2579.654025] ? refcount_sub_and_test_checked+0x203/0x310 [ 2579.654047] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 2579.654065] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2579.654081] ? skb_release_data+0x1c4/0x9a0 [ 2579.654107] __tcp_send_ack.part.43+0x67/0x5d0 [ 2579.654127] tcp_send_ack+0x85/0xa0 [ 2579.670670] tcp_cleanup_rbuf+0x411/0x750 [ 2579.686973] ? tcp_recv_skb+0x350/0x350 [ 2579.686992] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2579.687017] tcp_recvmsg+0x14c8/0x3450 [ 2579.687053] ? tcp_get_md5sig_pool+0xc0/0xc0 [ 2579.687070] ? mark_held_locks+0x130/0x130 [ 2579.687089] ? mark_held_locks+0x130/0x130 [ 2579.708505] ? find_held_lock+0x36/0x1c0 [ 2579.708547] ? __might_fault+0x12b/0x1e0 [ 2579.708565] ? lock_downgrade+0x900/0x900 [ 2579.708585] ? lock_release+0xa00/0xa00 [ 2579.708616] ? perf_trace_sched_process_exec+0x860/0x860 [ 2579.708637] ? usercopy_warn+0x110/0x110 [ 2579.708686] ? perf_trace_sched_process_exec+0x860/0x860 [ 2579.721186] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2579.721203] ? _copy_from_user+0xdf/0x150 [ 2579.721241] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2579.721259] ? aa_label_sk_perm+0x91/0x100 [ 2579.721280] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2579.721300] ? import_iovec+0x2a3/0x4b0 [ 2579.734965] inet_recvmsg+0x181/0x6d0 [ 2579.734984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2579.735003] ? inet_sendpage+0x740/0x740 [ 2579.735020] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2579.735040] ? apparmor_socket_recvmsg+0x29/0x30 [ 2579.735061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2579.751803] ? security_socket_recvmsg+0x9c/0xc0 [ 2579.751821] ? inet_sendpage+0x740/0x740 [ 2579.751841] sock_recvmsg+0xd0/0x110 [ 2579.751858] ? __sock_recv_ts_and_drops+0x420/0x420 [ 2579.751877] ___sys_recvmsg+0x2b6/0x680 [ 2579.751903] ? ___sys_sendmsg+0x930/0x930 [ 2579.760021] ? lock_downgrade+0x900/0x900 [ 2579.760043] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2579.760062] ? proc_fail_nth_write+0x9e/0x210 [ 2579.760084] ? __fget_light+0x2e9/0x430 [ 2579.760105] ? fget_raw+0x20/0x20 [ 2579.768213] ? find_held_lock+0x36/0x1c0 [ 2579.891269] ? kasan_check_write+0x14/0x20 [ 2579.895515] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2579.900466] ? wait_for_completion+0x8a0/0x8a0 [ 2579.905071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2579.910628] ? sockfd_lookup_light+0xc5/0x160 [ 2579.915153] __sys_recvmsg+0x11a/0x280 [ 2579.919065] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2579.924189] ? __sb_end_write+0xd9/0x110 [ 2579.928269] ? fput+0x130/0x1a0 [ 2579.931578] ? do_syscall_64+0x9a/0x820 [ 2579.935559] ? do_syscall_64+0x9a/0x820 [ 2579.939562] ? trace_hardirqs_off_caller+0x310/0x310 [ 2579.944701] __x64_sys_recvmsg+0x78/0xb0 [ 2579.948773] do_syscall_64+0x1b9/0x820 [ 2579.952679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2579.958057] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2579.962999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2579.967858] ? trace_hardirqs_on_caller+0x310/0x310 [ 2579.972886] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2579.977921] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2579.982968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2579.982992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2579.983003] RIP: 0033:0x457569 13:43:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0189436, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2579.983025] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2580.015201] RSP: 002b:00007f0599f13c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2580.022961] RAX: ffffffffffffffda RBX: 00007f0599f13c90 RCX: 0000000000457569 [ 2580.022971] RDX: 0000000000000100 RSI: 00000000200005c0 RDI: 0000000000000003 [ 2580.022980] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2580.022990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0599f146d4 [ 2580.023000] R13: 00000000004c399f R14: 00000000004d5d98 R15: 0000000000000004 13:43:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x10c, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2580.314333] IPVS: ftp: loaded support on port[0] = 21 13:43:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:11 executing program 5 (fault-call:5 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2580.484206] IPVS: ftp: loaded support on port[0] = 21 13:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5460, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc030620a, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2580.731446] FAULT_INJECTION: forcing a failure. [ 2580.731446] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.743440] CPU: 0 PID: 30216 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #362 [ 2580.750905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2580.760304] Call Trace: [ 2580.762916] dump_stack+0x244/0x39d [ 2580.766585] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2580.771806] should_fail.cold.4+0xa/0x17 [ 2580.775887] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2580.781013] ? __save_stack_trace+0x8d/0xf0 [ 2580.785361] ? save_stack+0xa9/0xd0 [ 2580.789005] ? save_stack+0x43/0xd0 [ 2580.792645] ? kasan_kmalloc+0xc7/0xe0 [ 2580.796546] ? kasan_slab_alloc+0x12/0x20 [ 2580.800705] ? kmem_cache_alloc_node+0x144/0x730 [ 2580.805468] ? __alloc_skb+0x119/0x770 [ 2580.809367] ? __tcp_send_ack.part.43+0x67/0x5d0 [ 2580.814143] ? tcp_send_ack+0x85/0xa0 [ 2580.817971] ? tcp_cleanup_rbuf+0x411/0x750 [ 2580.822300] ? tcp_recvmsg+0x14c8/0x3450 [ 2580.826401] ? inet_recvmsg+0x181/0x6d0 [ 2580.830394] ? sock_recvmsg+0xd0/0x110 [ 2580.834308] ? ___sys_recvmsg+0x2b6/0x680 [ 2580.838504] ? __sys_recvmsg+0x11a/0x280 [ 2580.842607] ? __x64_sys_recvmsg+0x78/0xb0 [ 2580.846858] ? do_syscall_64+0x1b9/0x820 [ 2580.850943] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2580.856319] ? zap_class+0x640/0x640 [ 2580.860062] ? zap_class+0x640/0x640 [ 2580.863786] ? zap_class+0x640/0x640 [ 2580.867514] ? zap_class+0x640/0x640 [ 2580.871263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2580.876841] ? check_preemption_disabled+0x48/0x280 [ 2580.881874] __should_failslab+0x124/0x180 [ 2580.886122] should_failslab+0x9/0x14 [ 2580.889951] kmem_cache_alloc_node_trace+0x5a/0x740 [ 2580.894989] __kmalloc_node_track_caller+0x3c/0x70 [ 2580.899951] __kmalloc_reserve.isra.40+0x41/0xe0 [ 2580.904727] __alloc_skb+0x155/0x770 [ 2580.908461] ? netdev_alloc_frag+0x1f0/0x1f0 [ 2580.912881] ? ktime_get+0x2c1/0x400 [ 2580.916622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2580.922172] ? refcount_sub_and_test_checked+0x203/0x310 [ 2580.927636] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 2580.933095] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2580.938126] ? skb_release_data+0x1c4/0x9a0 [ 2580.942502] __tcp_send_ack.part.43+0x67/0x5d0 [ 2580.947102] tcp_send_ack+0x85/0xa0 [ 2580.950742] tcp_cleanup_rbuf+0x411/0x750 [ 2580.954898] ? tcp_recv_skb+0x350/0x350 [ 2580.958919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2580.964775] tcp_recvmsg+0x14c8/0x3450 [ 2580.968696] ? tcp_get_md5sig_pool+0xc0/0xc0 [ 2580.973114] ? mark_held_locks+0x130/0x130 [ 2580.977363] ? mark_held_locks+0x130/0x130 [ 2580.981622] ? find_held_lock+0x36/0x1c0 [ 2580.985701] ? __might_fault+0x12b/0x1e0 [ 2580.989773] ? lock_downgrade+0x900/0x900 [ 2580.993946] ? lock_release+0xa00/0xa00 [ 2580.997945] ? perf_trace_sched_process_exec+0x860/0x860 [ 2581.003412] ? usercopy_warn+0x110/0x110 [ 2581.007494] ? perf_trace_sched_process_exec+0x860/0x860 [ 2581.012966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2581.018529] ? _copy_from_user+0xdf/0x150 [ 2581.022724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2581.028276] ? aa_label_sk_perm+0x91/0x100 [ 2581.032528] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2581.037471] ? import_iovec+0x2a3/0x4b0 [ 2581.041460] inet_recvmsg+0x181/0x6d0 [ 2581.045301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2581.050849] ? inet_sendpage+0x740/0x740 [ 2581.054954] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2581.059897] ? apparmor_socket_recvmsg+0x29/0x30 [ 2581.064684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2581.070233] ? security_socket_recvmsg+0x9c/0xc0 [ 2581.075018] ? inet_sendpage+0x740/0x740 [ 2581.079111] sock_recvmsg+0xd0/0x110 [ 2581.082851] ? __sock_recv_ts_and_drops+0x420/0x420 [ 2581.087877] ___sys_recvmsg+0x2b6/0x680 [ 2581.091870] ? ___sys_sendmsg+0x930/0x930 [ 2581.096028] ? lock_downgrade+0x900/0x900 [ 2581.100191] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2581.105741] ? proc_fail_nth_write+0x9e/0x210 [ 2581.110281] ? __fget_light+0x2e9/0x430 [ 2581.114280] ? fget_raw+0x20/0x20 [ 2581.117743] ? find_held_lock+0x36/0x1c0 [ 2581.121819] ? kasan_check_write+0x14/0x20 [ 2581.126066] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2581.131012] ? wait_for_completion+0x8a0/0x8a0 [ 2581.135615] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2581.141163] ? sockfd_lookup_light+0xc5/0x160 [ 2581.145687] __sys_recvmsg+0x11a/0x280 [ 2581.149589] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2581.154184] ? __sb_end_write+0xd9/0x110 [ 2581.158265] ? fput+0x130/0x1a0 [ 2581.161556] ? do_syscall_64+0x9a/0x820 [ 2581.165541] ? do_syscall_64+0x9a/0x820 [ 2581.169571] ? trace_hardirqs_off_caller+0x310/0x310 [ 2581.174715] __x64_sys_recvmsg+0x78/0xb0 [ 2581.178805] do_syscall_64+0x1b9/0x820 [ 2581.182710] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2581.188101] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2581.193037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2581.197893] ? trace_hardirqs_on_caller+0x310/0x310 [ 2581.202978] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2581.208011] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2581.213049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2581.217947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2581.223145] RIP: 0033:0x457569 [ 2581.226350] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2581.245303] RSP: 002b:00007f0599f13c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2581.253031] RAX: ffffffffffffffda RBX: 00007f0599f13c90 RCX: 0000000000457569 [ 2581.260318] RDX: 0000000000000100 RSI: 00000000200005c0 RDI: 0000000000000003 [ 2581.267591] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2581.274868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0599f146d4 [ 2581.282142] R13: 00000000004c399f R14: 00000000004d5d98 R15: 0000000000000004 13:43:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x4020940d, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) 13:43:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x7ff, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65008907f10200000000000000000000000000000000000000000002000000000000000000000000000000e6ff01000000005b02000000000000000000000000000000a418e45bf7c8f750e6bd95578453764412002c0ed95b5a614a8d8bca0cfee9453b779bf3f85c5477247c9f1521c7307475e224"], 0x48) 13:43:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xffffff7f, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2582.704396] IPVS: ftp: loaded support on port[0] = 21 [ 2582.712251] IPVS: ftp: loaded support on port[0] = 21 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5452, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40049409, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x2, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306225, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2583.162243] binder: 30262:30263 ioctl c0306225 20000680 returned -22 13:43:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc020660b, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2583.304551] IPVS: ftp: loaded support on port[0] = 21 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5451, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x20) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000000)={0x6, 0x1}) 13:43:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x10, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:15 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r1, 0x102, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1177}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = gettid() migrate_pages(r3, 0x1000, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x1) ioctl(r2, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070b766be0f6bef6174e0f03b647537382dd95be21038473a219c2f6449cc6f8b8ba22a9ea1f18ce69d5969a4975c480fb0197810859c867438a647b656b8372161240076b25e646d364f85f17aacaa635b118e9f5dbe3af29126ff21cf3017b4d13a7ac3b6c92055a0e627f2fb900495b9e2fa095ac72d48da1339ef8fb97ae3f28109891bafa128e5d6775605de5be2a9e46094369af31417f5fd00000000000000") unshare(0x400) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000140)={0x1, 0x5, 0x2, 'queue0\x00', 0x8}) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000002d00)=ANY=[], 0x0) 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306253, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2583.670089] binder: 30289:30290 ioctl c0306253 20000680 returned -22 [ 2583.685440] IPVS: ftp: loaded support on port[0] = 21 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5450, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2583.938360] binder: 30298 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 2583.938374] binder: 30298:30299 ioctl c018620c 20000680 returned -22 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046207, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2584.068128] binder: BINDER_SET_CONTEXT_MGR already set [ 2584.100191] binder: 30300:30301 ioctl 40046207 20000680 returned -16 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000b20000/0x1000)=nil, 0x2, 0x1, 0x1, &(0x7f00008b4000/0x4000)=nil, 0x8}) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYBLOB="00000000000000000000000002000000000000000000000000000000000000e900000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000"], 0x48) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100, 0x2000) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 13:43:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306202, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2584.311500] IPVS: ftp: loaded support on port[0] = 21 [ 2584.350966] IPVS: ftp: loaded support on port[0] = 21 [ 2584.358922] binder: 30310:30312 ioctl c0306202 20000680 returned -22 13:43:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) io_setup(0x1f, &(0x7f0000000000)=0x0) io_submit(r3, 0x9, &(0x7f0000001880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x6a, r0, &(0x7f0000000080)="338e06c79cdb41b66bc8b16a8b7c4d17f3983598c1c1c1f3b28ddb1b815950fa796a9e4b99c1b8e426e3933e14f12e73ea8bab1c1b12e71bb4b1a5", 0x3b, 0xfffffffffffffff8, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000140)="64db89979f0671bd201ff878ee958a6c98f19227e93e354d59f4bd9880119869805540a322eb8ce5256cbae367cb67040ed763f94ed5cc107917bd6b3dc1bb6cb03ec56ecc75d582252b2ca07cc4e112b663d7257ed472191e5f4eebdd38a203686a2891562505e044de3a0ba28faf25cddbf6d24dbb5dd2d99672d184c8f4d1f87343be2709614d5e0782b2", 0x8c, 0x7, 0x0, 0x3, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000240)="86606b6af173f57d34b00ab35b275a434000152f017fd3f7de3261274a5689360480ec4af366afa8cf0bcc57bf3b3add840087c2ce403592b49a0c6c9283fc17720a3809c4d66a4c3d512c7ec5a9662cd1f5abb7d2bdc470d22183aab3fcfd7fbd840a816173e6d481aff580297ee78bae31338c18e3d13c8e23faf024a5ee244d655e9a07233c45745d984d64f436f51b6aa6b4e25dd5f4519d760b2a5a6b67b647c90e2f0366b9dea2b2729bac31b660ba6cae5d47310117580428ab0ea4ed9d880ee82a4993ef960bccef7dbb61471163326e2240c831fdca039fb1d331f0644545d20aee8a550e7041ec56dafe0c5c2d02", 0xf3, 0x3, 0x0, 0x3, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7f, r1, &(0x7f0000000380)="59a9fb58b068f1dc6b5e3e227b09b0ff6702b33cf0058a2587f2dc084cb92da425f78d45d184eb747bf125bc883919568625431d388581d25cfab21a5e63b51926977d88496054f8a239bacbf6b9f8386df36dd0ec6e3d8576db5e9ed0c1a69432187f46cb741301c1ef0308457aa2e885d748f2eb713fc7657ba2", 0x7b, 0x6, 0x0, 0x3, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000440)="b99b06c04f5fd29294251f4ceb2605a0f06f1b3f4ca65e1c68a725fe36f18f3d6aedb5db23f0f15c379fc81379674045863a1606c9da7db76f3f6eb220b2f511cf5d56cbe4f36617827a7ad03e40b9e343a83dad29d1273405b7302eec1bf86a9cd0fc645f5b9ef19f261de95920258b5ec42926bc10fc127c81842ff785346448494d91532967533cdfe51ad986c8b1b4da42969dd02912f548c96ae4ac3d3ddca1868f0bf4858318a99f8703e879bd56d12d52436d271d143c786d089cd26c423564a93c86e9274bdd99b204c9393224bcd0ccbc5ac881b57f6c865e0ac12ca6d17bff880fa8ac61", 0xe9, 0xc932, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000000580)="5735a1cf8d1db5b6d08851791fd3507f773ee8712dfd3f3a3dca030b8cf48a5dd0f9b37aaf6213737055e6922cba33ba2d4a9e1a7b8bb37cd405d722d6f5b67b2ee1f977893bf87d568f134839db343ced9d001544bf95b2527c35d9f354b83dd54542fe8b6607304ed85a52e638811bc74366548fc1f4295bc2cf436ce6c974c98f23ee9d58bed2407f4152483c121d5af24b708d92fa9f7188f565eb92e1fbe5207be41bfa02", 0xa7, 0x0, 0x0, 0x0, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x696, r0, &(0x7f0000000680)="40b1884016cb71d427f7d64d25a7a0adf5884494e1d83ca4b0a3979042fe02cc2e1ae7725dc587", 0x27, 0x6ddc, 0x0, 0x2, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000700)="665ab72a0f73cc49a3907d20befb4a2a39fff61b436ae97eb0d6a8a05564a2da34a5cd5d02a286b5885c4f8d2147160b70e6e334f08e6ebfe7cb82b34252ff23c56673cc8aa9189b957e4a8b5850e823396885c65b418d8d6f31840c3c116fe4dcfef18aaacc13b030b36789f822ab10f91bfab1e95c0cc9a06a968bcfa612310fb21e077b6ada5f8144683db2395802bbcc187b53d63d35f3ae3bbbcbc7a68eac96197ffdf450bc4be17f5a5d880ef7c51c5babbb053fae30c3e7ec7b71d2f358a1aa35b1de5deaa6e05a7b6a18dc7df6b18badadbf870200e9364bc6b2578a2aa2a6895de0d56ce4", 0xe9, 0x1, 0x0, 0x2, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x7, 0x3f, r2, &(0x7f0000000840)="fd005982e0c6000cbbf349a6f006735d397b867d00aaa685552604968f502cd531affd100301d74a47cf3ebea6be9a901b36f3c523eecc2f4565801f74a4039e0d86852327c270301b23c04be728b233005be0a162430cb9053e9a2afeba6d70bf4a06147a71d1894e5ba47f8d5f92c7dbf94d083d3cb44eb4de33fa27452c1e1260d47e340804689a355d6352e8bc3de693414ca03c97015568f0d6537ab344ee0e47fc7f81014f575542374e48b2e8afa836e360defd9e7773ff6c933ef1b711473e41155f3f6b1fff41014b88fe9e2cbbea5a2ec532c4a8079f0bf88f92e4d6bc4ea8bd75bc83a26f7d5cb987df877bf57a3e69fe59ffee7458111aea91ac8a45b1fefef2455b90d708484eab2abbd785416f4e529a270491416f4d90b469e67e0f68553c4e5629ecb64795921c5af019215ad58bbff7770aa3ced369006790de98be7a9dc4954995044d35f1647d0e681b6f8a81799a3f8fef0aee78a6d2f1fba60bdb613a28fc6f2718dbd5630dc523ece049203e2f8bf1e15a07eaaf1fe8221059792420e83e424df3e1f3c7df616560f8439b7bd0f3444df8f8d0334895377c658609c25d5c97f57e4684ffc080ff7d2cd97d738cf92368f26702b03ce1d25346dc7cd8ae87d47fc90cfed47d87b85a6f50c87e46e789d9a08290f13b506613ec15fbdeae177f45d5ffa6cb4eaf9d62dd55538f3c8096bf3aa89a0639e504037204865a05bbf4b40641ded27d28fc17a457a09c7b0c6e34f2ee2e05a525ef62be66ffdd48d5c419436f36c7ff2f98d59992f7e3d8b30ac1232b1b24f47c8f84ad61399981fe1d8ccc2f147e86a1b7bf0fc5a984a3fc3551e650b016617e68ebfc358a8e358e8935e01062d5df4e7879a6b581e78f4f0106b76807ab95bcc333efe2206b86ffc9b08718a27acb56dce733474553664ebe61c297e491d466e78887bab3cb97f4b48f3521ab0433a375d9dea892c2c79cf6c2f439b4f5be0a8714f89eab06c2e79ea2f552faca8b362eda918391ca8d8dbacea70e381ce7de5b368e785430197c44ed2c893fcdd8cf92b2b429acfc341608569950b2eaba5cf79ae15e56a2e691c3cd0e835b83b6e11be764510224d178bb6047453396e4c4663d2d04960bbc7a4e70807bedcd32610f4a918498c4865075cf11d3011a9dbb7e40930f4f7b854731677baa0aa2a0e9f7ceeeabbb3988f6572fa6b7c1c109cb52b5be010b05157b047d9f917b6beee7bfd8394fd0b192c7d0f88270c5cbbc5d5de0cfe204d7107c06489c4985619baede1e097ba117e291a29883f1190a0aa9ef9b62d00cdb9cfb520c97b3fc62a03d82561208344e0b26e4be7eadc77ef62f4a81b440e2bbbe37c40e9dca9dc1bbe2f7685d18dddb92b4c8f8aadf021ab3ad468853b5a37a08cfdbadb09ad6187e4c3e537a2af325245eca3de6fdbc87630f4cf739bdeb0a59cb0c879c1d4f736bb9da24745fd2e29c0af9b63511339765883562c4e029b0aba5f8846d4519b11d9c1ed68df583ddf34654eff3106c281e9874fc5f8c6247db05964acfb79f50ca3a1e5c96e69f8bfc1b066c0f16b14388a4ed6ad27405c1f47caa5d7185893eea05e3f70c5e9e861184aff66cce972190de4a7e3e392c198657e01468b938c4fb5433f772c7c5dc8b1a3d2973b76e79de2b328c7f43142316001d6fc8976f9facc169fe610c55afd7d14c385d47ca5ee008287f8c9d9769dd955bc4cfe083a7cc6ea8f0363627720bbf3e7b77a475327e7e16e74a7e8363da5b6450114c59cd7090957ad099090ac8c7319e45952baa7f65d5c60e2df68b1ad8edff5e9102f02bd9e82aa0cb80b3a64f8d01c050130e7df2ced2c2206694ca3bacef0930dbbecd9363c7e656abb63e6674a092a662008f78d3ad4ee2269c593733807932de44f8b14b28250c89965ee45b2f9b82a259acc2d500bbec89851dc0e915ef6a9a6725a48c52bbd499d73aafddf2a2a41b6d03504310fba36a5a0060f42f72599cc9829f28db02d7fdb369fb27f1e86ad4d57f7a95c607c1424b23bd81b9d47e5a0f63d5f920373b7c9d196d30c4268959796bfe7627006d116a2bdb4feccad8b2b846a0e161ce5c4e2a31ae8dde3594ab3f052a4f77d33a0e38ee1208dac5fc0611e05d9c1f62ec9566f47df4e8412a5664765f2bf74adc74a5051bd3c85141f7cce802bbe8cf437c02b1ff976cad250ff81f755a9d6b82873eea6a5e2bcb5d12cef0745b2ceb9ffbf849923357cf0b4a8f6c141cb67d8ad0b3861a14243b69bee04dcecc4dd842084afa2374197d36ba415344a884e61117e2626a6bf84deaf50d1387e6495f8dcf268f17771f262302ffef5b065033e485457c32344a37bc56380a2227d0057e815da0544fe840de82ba62f69c8868641ed9b9ff46f6a987ba9f109ed62bada64d3f662a2991cf85c2e2b3503fcb953dfc711ac3cba149b0c7437f4ef683859ff323eedad2bbbb61f94396901e209bfb75d58111c2f6976d59a7943822c13e991799532c3b7c913376e43c13e91c62770fac6711ecbc80b1ca0225e05e8d04a08c4c775254300f1ca0d8d41082478566ad59980cc3674c31cddc67c76690d393f493fe28e6d6cf4190904c075ba5aa6f02d654ade344a429d8bb1f018eec508694997bb7b859ba66133e462294db7acfcd2223e823d3ab7f26e51a3c6f485066c4be32f06c2b4960f87200e15aa969c52299613c06804f02e1d0935223eda6de9bc4abf1d3c7f09abde5b1ddd076b32c1bda94d4d5c91a1e237a6bae1fc194f1fb7cbd152ee1784ce16761e59e9118372c6aff503f19fc69ece78640a3fba02e143621f7b56e46641ecb94c25ff127f0faf483e30a4415572a7ce3be6c20f798afdfd1a903ab606b43d9212aff298381e43a56d4e510faec42d9ba35342157df14281997d61345d92b35019c075ffa150bb728c63e1e09c2d4e679b67251a4d490de0725eaf9fcf871d206b63f3acbe1cbe3a50703abd2d65371eee926be9240d5f7534895256efa8d4f1b4af9d9c8c42c9ab44e800a9bb133fb41020a641ef7d27f21ba54d1f8bb78455b74d9dacbd8a5af29901b38895b2ee9e75b0e454864bd6b2c9494d58c9a914ee4af09a077779222debf160e30af7b0ab47d2ba9b9bb7615fe09ee53ffd55f77bf143206d3acd45ee7280d7ccc6d5af4ee472efe1fe85dbc827670663cfe69dc438d90d6e0267391695542ed2a9c9c29edbb936470a84d9a48d3cc4b2398118d727f46d485167268df189fad321a0b5377f856acd0d1c04b648066b495bdcef62afa01c95e54502eece4391fc40d1caa84f7208dfeed38fa92fa82f97f03066b7797d60d4c1aa912efca1c8267559f050a28787ed3e37a1e0fe18395df49ba8f84d7058935a1ec3d09400415d739fdb32f79d8fd795511a4ec087f8f263b8a070cc34a8fcacb506a8be522a002c597df0dc105ac6dc06ba4d80f66eb7a1aec7bf04301b8b44b3a111810d938fe6456b04f729b59270c100dda9718d07544eec12d4959a57887de99fe22dc99d325ba7ab32e5d836d976a064e545457dcc4e05bd648f098c44182bef988f7c0681ecefc2f667a37b47bea1f823c1d3288e7824d06be3246908b83e26f1e9ce76946137d3b9241dbc68193307d0df918f914816c38168a6ee3fc3cc09ca499621e82a45536cdf5a2f8738a7126a2527f83e3d8b06ce3e9477df8e2bcdd9d3f9851aa7fe92ae3b8cea6fbf97bbbf3757ceeaa2ec1300952fbffb81dd1f3f4f17e81222274c5b8f85c6849ca06d4df544aef026eff4f37d9d213840c396a2a278852fa2203be7e14ee635baa589076df1e9974989d964dfbd18e39a311abdcba39c1cd8bda64170193f88a438e5aae3548338cb471fb494c631e54a6c55b5aa1b482a8402fc338ad789d4b06ff5453f3d5544b6b15ef8d09285b134793976a8cdeb20baec8b6e48e39fc82adae538d5e835bf96cb2ab3807f2af469ec9de994b4de103f236cb3167eb0107a182eb5d719cbcc9bdd2916d9914879adf7a598b8ac586540870b46714a95741b9be370c0ad561875ee8e2c7a3d5c86c05f4c7688f7d1c200cc66c004859f0cb932b90aae863306337f26971b83ee41864d8935aa1a896f9fea6ba86b622cdc003825159a9863b50184d6ec68257b0b878b6ea0dff19570badf3f76fc5d7c04c7e9f34ed24a78b58659a9b948b61080d6d9923acf847733979a2c60ecbcfb40957b3f22f719a827c5c10b16aa03635e5c74ccf5ec40d81303fe4ebd347c5b930f892cedbeac7f00cb04cf30dc87844eeb591e576f3f69beb2b79d7f53977e9c7b720a2fe5607f99e869f0cb89d43853794c6bf2cc55ce8b1a9bb2546922ffebf547860f769c091cfc4208024d7e072dfa09fa4c8f644c277437100eff106acf2a12ecfade2668a67afdfb9a5ffd8ebd9ffb2462ecc72f32f838d4f5dff5851b38b8831e49b17659e6d12859f46d9e573ad02492d9151aa43e07384aa4d7ec07748e1e68c739bbd186537bc45f49a1f09819f26eabcc809e0a54f1b63687acb3b2a9f583d8d82fc30bc1ad6e1b743cfa2085c3c738575510a42907e5463315d0288288d9928e6f2a2faa9ac180acb87d2da4ba7e3adf3bca5f021c9aac70980ffeb9c2c24a8b30ff0308e1cc5a55a4ac66963bdf5633cc212106eca08fc2cd3ee464508c4948d6a3389c2c6d3c6c7b08dd863fc5d3817d48479ebb60e4c96cec8c6ee74f474f8e89c23a50571aab184a585b0d202aceb68d2ff88582d9d742c78dff4f2989e4b902d8d32fe09174d19f38539995c8c9471392f66c447defc5b9888533fa4b1276c5fe22fc6564fae9fef7c6a217c327c1b58d53944ed8a47e086f59960bbc94d1b681572e11ebfd419a0f2a16c7052f9efc688199ed1ef4cdbd8c7b8ab31c01d4f67c88717bf3931e6d02ff207e8bba9a208f7291a1f3aa70e63cd990725d7b5d889fcac013693474ac1db1b832e42bfdff048b52f633bd78c8a542ca4506ae843d4f35fe84b0277c1f9b6d6aa2b3d00bfbce327fee19c66a6c9659d50e19def9528acac035669053941886af2000b08c6e4d64fd191a27bd00840cb926df7bb9431952a555645827b9615964d3901f62928810f784c3763e17c37538bbcc99cf8191ef29620a6e162e10ac56be68f3936bca6642738800114d1142837ef638533f7d83b1e618b6334ef5e4780050199d9161b087558864e6df367dd628a3cc34cdf78555e1ccdfd2781269a6157ff8bc45ed91661d2246bc7bacfc14f4ed7dd609ea541be9eaada25db8a0de778a4b34dd3f518e516178ae4715860d7a2002047101b7cc860f81f1bbb6517c6987781f9b9fc81564eb553bf92a3c1a8f6c9ffd7452704fa24fd5ae10d2a7b17601973c9e8240ec351c6cdb3ec980f1437ae39307bd6ba08b6246c08af26a211d657eef9d7b82b006688c708c26a15031ae6fdabc18e8268dc5d294dab53e7ae4060b36184535ed51c60c582673242baf5ec11e659b69dd41ea681294adff549eef98bae0887e9fa934d79cfa9271289ff73fa6dc07e6c37ee00318eed3410867007370aace38e4a6bf7592cfaddd33cf4feea36fcbb207920090af4f3a33adf0e75a5954c68d183fb91f97606761932ffa290b85191d81f791f3e5f4cf3681ddce34816900469899d9a0573ad2ecab2989f10132f03bc6e35c4b67a61dc79dd091f1b791d4a606953a8d8a61055c5d28fe592e90e2cdd9f1623cef4b2340f32fbf0b9c5605ec6d6e970d833a8c6d6add87e69db92703bce", 0x1000, 0x16, 0x0, 0x3, r1}]) 13:43:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306254, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xffffff7f00000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2584.762495] IPVS: ftp: loaded support on port[0] = 21 [ 2584.770299] binder: 30330:30331 ioctl c0306254 20000680 returned -22 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x19, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2584.846265] binder: 30337:30338 got reply transaction with no transaction stack [ 2584.862524] binder: 30337:30338 transaction failed 29201/-71, size 0-0 line 2741 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2584.922291] binder: undelivered TRANSACTION_ERROR: 29201 13:43:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000e1ff0000000000000000000002000000008a4f2f160000000000000000000000000000000000000000000000deffffffffffffff"], 0x48) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x98, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x39}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x53, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.097315] IPVS: ftp: loaded support on port[0] = 21 [ 2585.111215] binder: 30344:30345 got reply transaction with no transaction stack [ 2585.142817] binder: 30344:30345 transaction failed 29201/-71, size 0-0 line 2741 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.214056] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.262404] binder: 30347:30348 got reply transaction with no transaction stack [ 2585.280677] binder: 30347:30348 transaction failed 29201/-71, size 0-0 line 2741 13:43:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.347258] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.380899] binder: 30350:30351 got reply transaction with no transaction stack [ 2585.397554] binder: 30350:30351 transaction failed 29201/-71, size 0-0 line 2741 13:43:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x22, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.464582] binder: undelivered TRANSACTION_ERROR: 29201 13:43:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xf66, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 2585.511454] binder: 30352:30353 got reply transaction with no transaction stack [ 2585.529383] binder: 30352:30353 transaction failed 29201/-71, size 0-0 line 2741 13:43:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x4000000000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2585.660229] IPVS: ftp: loaded support on port[0] = 21 13:43:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x9, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.718281] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.784025] IPVS: ftp: loaded support on port[0] = 21 13:43:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x45, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.872057] binder: 30379:30380 got reply transaction with no transaction stack [ 2585.884405] binder: 30379:30380 transaction failed 29201/-71, size 0-0 line 2741 13:43:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x33, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2585.935503] binder: undelivered TRANSACTION_ERROR: 29201 [ 2585.973656] binder: 30381:30382 got reply transaction with no transaction stack [ 2585.990360] binder: 30381:30382 transaction failed 29201/-71, size 0-0 line 2741 [ 2586.035057] binder: undelivered TRANSACTION_ERROR: 29201 13:43:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xa00000000000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_getaddr={0x94, 0x16, 0x222, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x84, 0xfd, r2}, [@IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2587.535061] binder: 30393:30400 got reply transaction with no transaction stack [ 2587.545333] IPVS: ftp: loaded support on port[0] = 21 [ 2587.551061] binder: 30393:30400 transaction failed 29201/-71, size 0-0 line 2741 [ 2587.571565] IPVS: ftp: loaded support on port[0] = 21 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3a, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2587.629724] binder: undelivered TRANSACTION_ERROR: 29201 [ 2587.715916] binder: 30410:30412 got reply transaction with no transaction stack [ 2587.727073] binder: 30410:30412 transaction failed 29201/-71, size 0-0 line 2741 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2587.799041] binder: undelivered TRANSACTION_ERROR: 29201 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x32, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2587.960353] binder: 30415:30416 got reply transaction with no transaction stack [ 2587.970421] binder: 30415:30416 transaction failed 29201/-71, size 0-0 line 2741 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xd, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2588.024251] binder: undelivered TRANSACTION_ERROR: 29201 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2e, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2588.075066] IPVS: ftp: loaded support on port[0] = 21 13:43:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2588.126782] IPVS: ftp: loaded support on port[0] = 21 13:43:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x34, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x8000000000000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, r0, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x9, 0x3}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYBLOB="6d616ea96c65000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48) 13:43:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) prctl$PR_SET_ENDIAN(0x14, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x124, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x0, 0x1}, @increfs, @transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000140)=[0x78, 0x28]}, 0x8}}, @dead_binder_done, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=[0x38, 0x18]}, 0x5}}, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x20, 0x78, 0x68, 0x28, 0x40, 0x48]}, 0x9}}], 0xa7, 0x0, &(0x7f0000000400)="8d70a6470e574851141c312627a584896ba3dd8dfc7132fa062ed5d8666b86b5f0c72ca149256d1834fa93b3fb6dc6782c5b02b77d8cb76708de328c20bcffad5445546fda21844b20f94fd180c954e0511333ad356621901df0355976469d39923fa3ab9e029456e173bca699cccceda711d109224484fb9c5eb86dc3237d168fc26e2dc9d1a630a3ce9f6975e24fb2991e0078254d1c1e4d79c063b864c3f5a30e31c6d6cfe5"}) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) [ 2591.248268] binder_transaction: 2 callbacks suppressed [ 2591.248278] binder: 30434:30442 got reply transaction with no transaction stack [ 2591.261394] binder_transaction: 2 callbacks suppressed [ 2591.261412] binder: 30434:30442 transaction failed 29201/-71, size 0-0 line 2741 [ 2591.263946] IPVS: ftp: loaded support on port[0] = 21 [ 2591.282563] IPVS: ftp: loaded support on port[0] = 21 [ 2591.287724] binder_release_work: 2 callbacks suppressed [ 2591.287732] binder: undelivered TRANSACTION_ERROR: 29201 13:43:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.376962] binder: 30451:30454 got reply transaction with no transaction stack [ 2591.388000] binder: 30451:30454 transaction failed 29201/-71, size 0-0 line 2741 13:43:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x47, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.443851] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.493472] binder: 30455:30456 got reply transaction with no transaction stack [ 2591.518145] binder: 30455:30456 transaction failed 29201/-71, size 0-0 line 2741 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x15, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.566828] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.609132] binder: 30457:30458 got reply transaction with no transaction stack [ 2591.622701] binder: 30457:30458 transaction failed 29201/-71, size 0-0 line 2741 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x27, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.679072] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.723833] binder: 30459:30460 got reply transaction with no transaction stack [ 2591.741607] binder: 30459:30460 transaction failed 29201/-71, size 0-0 line 2741 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.806645] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.846913] binder: 30463:30464 got reply transaction with no transaction stack [ 2591.856530] binder: 30463:30464 transaction failed 29201/-71, size 0-0 line 2741 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xb, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2591.890386] binder: undelivered TRANSACTION_ERROR: 29201 13:43:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3b, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0a5c2d02403162ee629ffb") unshare(0x200207fe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x2000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='mangle\x00', 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='mangle\x00', 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2592.141359] binder: 30476:30479 got reply transaction with no transaction stack [ 2592.199334] binder: 30476:30479 transaction failed 29201/-71, size 0-0 line 2741 [ 2592.221469] IPVS: ftp: loaded support on port[0] = 21 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4a, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2592.300319] binder: undelivered TRANSACTION_ERROR: 29201 [ 2592.367027] binder: 30494:30495 got reply transaction with no transaction stack [ 2592.389507] binder: 30494:30495 transaction failed 29201/-71, size 0-0 line 2741 13:43:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x39, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2592.459901] binder: undelivered TRANSACTION_ERROR: 29201 [ 2592.498506] binder: 30496:30497 got reply transaction with no transaction stack [ 2592.507576] binder: 30496:30497 transaction failed 29201/-71, size 0-0 line 2741 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xa, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2592.571340] binder: undelivered TRANSACTION_ERROR: 29201 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x13, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) r2 = memfd_create(0x0, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) [ 2592.708290] binder: 30501:30502 got reply transaction with no transaction stack [ 2592.729616] binder: 30501:30502 transaction failed 29201/-71, size 0-0 line 2741 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x48, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2592.815136] IPVS: ftp: loaded support on port[0] = 21 [ 2592.815311] binder: undelivered TRANSACTION_ERROR: 29201 [ 2592.863760] IPVS: ftp: loaded support on port[0] = 21 13:43:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4b, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0xa, 0x81) 13:43:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x8000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x40, 0x2, 0x4, 0x20, 0xffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x26, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2593.315780] IPVS: ftp: loaded support on port[0] = 21 13:43:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x37, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x50, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2593.517622] IPVS: ftp: loaded support on port[0] = 21 13:43:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x41, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0x4e) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x0, 0x3a, &(0x7f0000000000)="24656d3047504c25766d6e657430285e6e6f646576776c616e306c6ffa776c616e306b657972696e672676626f786e6574316367726f75702f00", 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/net\x00') 13:43:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x29, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2593.838451] IPVS: ftp: loaded support on port[0] = 21 [ 2593.913975] IPVS: ftp: loaded support on port[0] = 21 13:43:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x35, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x2, 0x81) 13:43:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x40000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x25, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2d, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2594.750531] IPVS: ftp: loaded support on port[0] = 21 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x38, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x4, 0x81) 13:43:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xc01, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2f, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2595.154439] IPVS: ftp: loaded support on port[0] = 21 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x28, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x7, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2595.497055] IPVS: ftp: loaded support on port[0] = 21 13:43:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1e, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x46, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2595.736322] IPVS: ftp: loaded support on port[0] = 21 13:43:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x16, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2596.112158] IPVS: ftp: loaded support on port[0] = 21 13:43:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x1000000, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0xffffffe0, 0x81) 13:43:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x48) 13:43:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 2597.278213] binder_transaction: 16 callbacks suppressed [ 2597.278223] binder: 30647:30654 got reply transaction with no transaction stack [ 2597.296066] IPVS: ftp: loaded support on port[0] = 21 [ 2597.296497] binder_transaction: 16 callbacks suppressed [ 2597.296514] binder: 30647:30654 transaction failed 29201/-71, size 0-0 line 2741 [ 2597.342673] IPVS: ftp: loaded support on port[0] = 21 13:43:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2b, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2597.398439] binder_release_work: 16 callbacks suppressed [ 2597.398455] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.451607] binder: 30663:30664 got reply transaction with no transaction stack [ 2597.477601] binder: 30663:30664 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x36, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2597.563250] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.618311] binder: 30665:30666 got reply transaction with no transaction stack [ 2597.633249] binder: 30665:30666 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x2a, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2597.686393] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.735130] binder: 30667:30668 got reply transaction with no transaction stack [ 2597.747671] binder: 30667:30668 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4d, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2597.800490] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.844107] binder: 30669:30670 got reply transaction with no transaction stack [ 2597.864186] binder: 30669:30670 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2597.946386] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.975836] binder: 30673:30674 got reply transaction with no transaction stack [ 2597.979456] IPVS: ftp: loaded support on port[0] = 21 [ 2597.983766] binder: 30673:30674 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3e, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2598.022385] binder: undelivered TRANSACTION_ERROR: 29201 13:43:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0xf00, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x20000041, 0x81) [ 2598.092559] binder: 30677:30683 got reply transaction with no transaction stack [ 2598.120170] binder: 30677:30683 transaction failed 29201/-71, size 0-0 line 2741 13:43:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x16000000) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x10000) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000180)={[], 0xffffffffffffffff, 0x8d, 0x1b7, 0x0, 0x3, 0x6004, 0x4, [], 0x7}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x0, 0x5, 0x2, @local, 'veth0_to_bridge\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d617f0000000000000000000000000000000000000200000000000000e4ffffffffffffff00000000000000400000000000000045eb9b1ae29006db33446aee7cc102d02194a3f8b976e3ffcdc8450d2ac81cc2645459ae0ae1afcbdd11457c2c8234e38589ce7a879caa0f07d136310c87c030c2e99c2b2f6f2134ec199be7603b0c484b0f3bd89adb5dba40d1d67dc0c56fbf63ce76a8e0e10d7f7e8c0bac7828f7c1a2fa638b845c1cac815acf0faf80353623e5a42fd2c093272d9d59027f94c865f1f155072623c21df2563377e0ef6053c802866496f8c5d186ba4db208878e83857b478d29733a3679f4ee49"], 0x48) getegid() 13:43:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4f, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2598.279236] binder: undelivered TRANSACTION_ERROR: 29201 [ 2598.330275] binder: 30699:30700 got reply transaction with no transaction stack [ 2598.343621] binder: 30699:30700 transaction failed 29201/-71, size 0-0 line 2741 [ 2598.383997] binder: undelivered TRANSACTION_ERROR: 29201 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x5, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x402, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000002c0)={0x1, 0x0, 0x8000, 0x10000}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x1, 0x6, 0x4, 0x7f, 0x7, 0x0}, &(0x7f0000000100)=0x20) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000240)={0x9b2, 0xffffffff00000000}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x35f, 0x9ac1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x30, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2598.607988] IPVS: ftp: loaded support on port[0] = 21 [ 2598.618343] binder: 30706:30707 got reply transaction with no transaction stack [ 2598.641521] binder: 30706:30707 transaction failed 29201/-71, size 0-0 line 2741 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x23, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2598.717099] binder: undelivered TRANSACTION_ERROR: 29201 [ 2598.779666] binder: 30710:30711 got reply transaction with no transaction stack [ 2598.794509] binder: 30710:30711 transaction failed 29201/-71, size 0-0 line 2741 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2598.861507] binder: undelivered TRANSACTION_ERROR: 29201 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x12, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x3, 0x81) 13:43:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x34000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2599.389969] IPVS: ftp: loaded support on port[0] = 21 13:43:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xd8c, 0x80) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000000100)="8c651f2bc1c9668dca62a9394521caf55d21eac2cc3620e9e45cad4785843722508f733ecf828ed894238e80314bbdadf20f6acc3f3a92a2307f6d9b6547c52a5f85a07cf8824ac7e739890ce4ebb3f181f667960e9f0c8f83a17bc2d8", 0x5d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fsync(r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 13:43:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x17, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x31, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2599.589666] IPVS: ftp: loaded support on port[0] = 21 [ 2600.102870] IPVS: ftp: loaded support on port[0] = 21 13:43:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000e00000010000000008000000ac1414aaffffffffac1414bbe00002000000140d0000000000000006ac1414aa"], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4000084) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4e, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0xfffffdef, 0x81) 13:43:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x2, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$RTC_AIE_ON(r1, 0x7001) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="0000008ed568a2a4412b7e0000000000000000000000000000000000000000020000000000000000000000000000080000000000000000000000000000499b7b4c33378ffd035978c2062d5e60c7a940707e7417a6ea3d47e8e99219ed1ca8bb1bc376a128e80941a6dc12e9bf42fd7479540046557367517ec54384366979d63233eb2fbebbcf1ecef4a211a2abb6a5b180612b6bde95d6c53376e2bb6b9b3e5668b0f581b6dc21b80ff3a6fc911b00000000b2604ccc44361067fcc29b6737e5bcf4ddac8c2d211cafa1f7539cecc39988216d5b63af292097be000000000000000000"], 0x48) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x51, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2600.469271] IPVS: ftp: loaded support on port[0] = 21 [ 2600.496371] IPVS: ftp: loaded support on port[0] = 21 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x43, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x3d, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x42, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x52, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1a, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2601.103672] IPVS: ftp: loaded support on port[0] = 21 13:43:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x5, 0x81) 13:43:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x21, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip_vti0\x00', 0x2}) ioctl(r0, 0x4, &(0x7f0000000180)="0a5c2d0240316285717070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) fcntl$setown(r0, 0x8, r1) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000001c0)={0x9, 0x82, 0x20, 0x5, 0x100, 0x8000000000000000}) r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) accept$inet6(r2, &(0x7f0000000200), &(0x7f0000000240)=0x1c) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000140)=0x6) memfd_create(0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000080)={0x32, 0x4, 0x0, {0x4, 0x8000, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) 13:43:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x1}) [ 2601.469451] IPVS: ftp: loaded support on port[0] = 21 [ 2601.627344] IPVS: ftp: loaded support on port[0] = 21 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1d, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2602.130498] IPVS: ftp: loaded support on port[0] = 21 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xf00000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x600, 0x81) 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x49, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2602.370456] binder_transaction: 13 callbacks suppressed [ 2602.370467] binder: 30844:30845 got reply transaction with no transaction stack [ 2602.385879] binder_transaction: 13 callbacks suppressed [ 2602.385914] binder: 30844:30845 transaction failed 29201/-71, size 0-0 line 2741 13:43:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x1c, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x20003, 0x7, 0xfffffffffffffffe}) [ 2602.425176] binder_release_work: 13 callbacks suppressed [ 2602.425183] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.485163] binder: 30849:30850 got reply transaction with no transaction stack [ 2602.517614] binder: 30849:30850 transaction failed 29201/-71, size 0-0 line 2741 [ 2602.532278] IPVS: ftp: loaded support on port[0] = 21 [ 2602.582753] binder: undelivered TRANSACTION_ERROR: 29201 13:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7a, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4c00000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2602.885664] IPVS: ftp: loaded support on port[0] = 21 13:43:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x3f00000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2602.992858] IPVS: ftp: loaded support on port[0] = 21 13:43:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6c000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x4e4, 0x81) 13:43:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x10000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6c00, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2603.478569] IPVS: ftp: loaded support on port[0] = 21 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6c, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x3000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x48) socket$rds(0x15, 0x5, 0x0) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x700, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x6}) ioctl(r0, 0x20000000008912, &(0x7f0000000280)="0a5c2d0240316285717070") unshare(0x6c060000) socketpair(0x0, 0x3, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x3f00, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2603.942416] IPVS: ftp: loaded support on port[0] = 21 [ 2603.948544] IPVS: ftp: loaded support on port[0] = 21 13:43:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2603.986913] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 2604.009074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xa000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x7ffff000, 0x81) 13:43:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x100000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7a000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7400, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6c00000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2604.602015] IPVS: ftp: loaded support on port[0] = 21 [ 2604.815515] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 2604.841568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2604.908011] IPVS: ftp: loaded support on port[0] = 21 13:43:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xffff) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[], 0x0) 13:43:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x5000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2605.015803] IPVS: ftp: loaded support on port[0] = 21 [ 2605.564744] IPVS: ftp: loaded support on port[0] = 21 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xfdfdffff00000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0xffffff1f, 0x81) 13:43:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x1000000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x5) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r1}}, 0x18) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000001c0)=0x20) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @empty, 0x1}, 0x1c) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x1ff, 0x7}) unshare(0x10100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000600003c2140c908271f19b97c0f2c5961bfcfdfb47f3702c337eca0ac4c64f92c6a2b630000008fa401e609c7cca45b5a000000000000000000"], 0x48) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4800000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2607.760598] IPVS: ftp: loaded support on port[0] = 21 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xa, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2607.925494] binder: 30977:30978 unknown command 16388 [ 2607.937106] binder: 30977:30978 ioctl c0306201 20000680 returned -22 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2608.073436] binder: 30979:30980 unknown command 73598720 [ 2608.083977] binder: 30979:30980 ioctl c0306201 20000680 returned -22 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xfffffdfd, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2608.224787] IPVS: ftp: loaded support on port[0] = 21 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x48, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000002001b00000000000001000000000000080000000000000000000000000000000000000000000000"], 0x48) r3 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0xfffffffffffffffd, 0x0) setgroups(0x2, &(0x7f0000000080)=[r3, r4]) [ 2608.370117] binder: 30987:30988 unknown command 0 [ 2608.387659] binder: 30987:30988 ioctl c0306201 20000680 returned -22 13:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x5, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2608.444777] IPVS: ftp: loaded support on port[0] = 21 13:43:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2608.525872] binder: 30992:31000 unknown command 117440512 [ 2608.533294] binder: 30992:31000 ioctl c0306201 20000680 returned -22 13:43:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x301, 0x81) 13:43:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xa00000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x700000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002d00)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000d30000000000000000000002000f00000000000000000000000000000000008000000000000000000000000000000000000000"], 0x48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) 13:43:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xf000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) 13:43:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x6, 0x81) 13:43:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7a00000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2610.335161] IPVS: ftp: loaded support on port[0] = 21 [ 2610.353641] IPVS: ftp: loaded support on port[0] = 21 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7400000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4800, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x2000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x1000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x20000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x600, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2610.938022] IPVS: ftp: loaded support on port[0] = 21 [ 2611.004896] IPVS: ftp: loaded support on port[0] = 21 13:43:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082190a6025bf4920522d000000000000000000000000"], 0x48) 13:43:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x2000000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x20082, 0x0) unshare(0x6c060000) mmap(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x1000000, 0x8034, r0, 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="450caae00fff03f3a4ae67cdb76504193d2a6f56adbeb6bae38cf2a82786beb8be5a4fba3da7624e626155f5abd85e8b8e780c73abcb079d6c9d294bb97ed341af88f612bc19f8f5a3484ad05eea96a7255b6d3d617be58de3cd1f2f9be4fd45eb579ea7179dfaf7c3cd6a73cf79c95bcffbca8579859292f35d6f1d9f1c04e5c0e0a28d05777524e4c16a6a3a426a593797eecaa49f1d7d256418b0ff32fde1f132befe59f64278bdcd61f6cb4901c3676578a88c4b97620f972294ea79bfeba8df390883f0d7ab18", 0xc9}, {&(0x7f0000000000)="41bdb0d0ca8fa2eb94fc3a18fa0c39a121c2a5641a9abafc4a86a1dc320371547d867c0d4ed0e6aa9710d216fb370b3675deb643", 0x34}, {&(0x7f0000000200)="06900c6af70dc8dff5d6f7cec711bce449b4cb11b5ca993cb9136863b0ec1d80bc4479e4359817d7fa25736600fb92b07e0cb7051341e154f22e6f203bdc42a24baa565c6a3abb1990c7487ece228bc1c21b982bec05aee9f730754a4d010b6899d6807d16596b7ef166115439a936a452a0", 0x72}], 0x3, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x3, 0x81, 0xffffffffffffffff, 0x40, 0x6}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r2, 0x4, 0x8, 0x9}, &(0x7f0000000380)=0x10) memfd_create(0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 13:43:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x34000, 0x81) 13:43:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xf00, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xffffff7f, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fchmod(r1, 0x82) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2613.262547] IPVS: ftp: loaded support on port[0] = 21 13:43:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4c000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2613.301414] IPVS: ftp: loaded support on port[0] = 21 13:43:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6800, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6800000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x500000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2613.573893] IPVS: ftp: loaded support on port[0] = 21 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x300, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) getpid() gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='system\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x28, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x8}, 0xc) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x28, &(0x7f0000000140)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)=ANY=[]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x4000000000000000) 13:43:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x8, 0x81) 13:43:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xc01, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x2, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2614.137826] binder: 31127:31129 unknown command 16388 [ 2614.157675] binder: 31127:31129 ioctl c0306201 20000680 returned -22 [ 2614.180515] IPVS: ftp: loaded support on port[0] = 21 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x300000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x600000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xa00, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"55c990aa4964e82a3ec457f4c7d69681319b32c4fe546fdaa52a7f1ee7a27d5f71fb895c4bf21bf0301d2a160f646d230ecc224077896302fd1e64ad393ef24145492c44f164e53100dc89f52d25895dcd4320f649fc784145767a5224088c492511d0a5d7bb0c0176706c238dfeee9caae8811ba9d2ec92a4a340c091647ae36123d290d72c375af37957c01aa945bdb6a7a6870069350c7c2ac6b9c032e80d8150743be19fbaf9447badcc1908d174e06fd466e64e24e3c892ee52a4b31338ad67030baeffa5bfa701c1e7bfbd8fd016d87018d05ab11f9e813877bd9cdf0884cbaabe09190f95550884f8a1e6510f6bbe96f86859597bf89741aea068e55b938ebee9d9bff58478513c4b72edbf79f75431b54743ab05d3980b30b2127cf13bf94beba0828a4bb1848bc1f862fac00698e4bd2f4bde3bb35107056c4147c0ed8d7d588ba03c37b82ea384d1db706a8b46ee351812ad747d1045540a48b542996812548270c5af5d27ff72920bebd8371348c7f55a953e236ac13fe737a81bd9b61e30a5e9c526cf61862f5a0a90963c73febe3b66ab29f17b6da74b7647bcc4e527356d57fa1fe3f3dffab39df7b353eda6b839decb4484939f4fc0c84bda1c964941ccf4db1ca0d2c152fd356ac66441c8b68755d533b416d9f7999678227c7a69db08e997252dd6a38fc458d93fac9f1f14f49b7ca4a0b0c8b538d2f30c34503a0975506ae9004b3e5c3d2469cf4e03d9b79dc1499647b5b680a02bdc56c18782c48120dee663918288f068c49d85355d114cfe0c5d1405cf5e37b181f296fa7dc9af116fbe220121fe139739226eefce468f27f5d21ab51ef0e26134c5341cf13799003ceb38d4050c2ba1c9e6decc2d11a8f14a6adadd45e615106b5dd4c07093ba114ac55b4e80d1a3545ab6e8fbf796b908ecc244340fc06e4d4bd6e069b7f0232198ab067a709bcdd4d41500e5dc7032e5993f965d4603033fe61cc523937d7345df42b4f1b62c4daf64f6c29eb2f214b88680bfe19252b67719ccea37d19fe3bfb0c8ad0bd6f4a1df532ec9220269453df5144ff48f63c2ad655b8f20db01b3af95c11f4e7de2bd0a47d47b08b620589a33327bef9ee310505c1736510e88b74281f098099c753d30fcf32f31a0521e32407d689b093f24d07049682ff4662b5b94616699fd704589c0edb02cf3e622088c685564b0c166f9f3cdb12dd8a70684ac6e24570191dda2db2b1965d2397a45060f834405b81fa79204e029b7cd93333dfbef669f3e480fd071f5b87e9fdf984dfe176353ed12ea15484366548336f540a5f1e8b9e19bdeb8d71dce9ecf03d09515bc4bcf7be382176e7e12395ee0f795f76695d0d90eee181d300deb89d7098403ac76309e63f6ca3eade1ce57dcd9de56e24610ed5c470d5540e9f50d068ee8a1431bb3216ae99b18"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:43:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x3, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2614.495972] binder: 31151:31152 unknown command 64 [ 2614.508562] binder: 31151:31152 ioctl c0306201 20000680 returned -22 [ 2614.519734] kvm_hv_set_msr: 4 callbacks suppressed [ 2614.519750] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000013 data 0x0 13:43:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x74000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2614.555711] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000077 data 0x0 [ 2614.581032] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000007 data 0x0 [ 2614.593822] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 [ 2614.603610] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 [ 2614.613611] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 [ 2614.624927] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 [ 2614.635070] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 13:43:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x68000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2614.654805] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 [ 2614.664501] kvm [31149]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000047 data 0x0 13:43:46 executing program 3: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x74, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, 0x7, {0x546, 0x0, 0x100000001, 0x7fff}}, 0x20) r3 = accept(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2615.166392] IPVS: ftp: loaded support on port[0] = 21 13:43:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xa00000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x100000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x0, 0x40, &(0x7f0000000100)="2d81867083813012747910c99e52f46153deb70a55d2925b35719c15edbf256db435dfc23871e80bc65bb66de2631fea0299a7b3bc56381eec798339a17e3b6860548e43600d4113406fb3eeaa04766b497c9e44a2a3012753e46151de7395330bbafc890feef76b7ab6f866541bf1023eb9aa6536a3a9adbc619c01f1fa7dd9229453df1b80666f5da971db1873fae5f157baf00913bbf0aaff43da7a7b196e62ce8a972883810df3dc8d328e08b8d7a2004b7fa7d21f92bfa1466f1eb3b53e2b1a2af3525f1aa2c59c", {0x3, 0xfff, 0x7d5f5779, 0xf, 0x4, 0xffffffffffffffe1, 0xf, 0x47}}) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x2000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2615.927095] IPVS: ftp: loaded support on port[0] = 21 13:43:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) arch_prctl$ARCH_GET_CPUID(0x1011) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000000009) accept(r3, 0x0, 0x0) 13:43:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x60, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x200000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4c, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) [ 2616.218495] binder: 31239:31240 unknown command 0 [ 2616.227626] binder: 31239:31240 ioctl c0306201 20000680 returned -22 13:43:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xffffff7f00000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0xfdfdffff, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2616.519515] IPVS: ftp: loaded support on port[0] = 21 13:43:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fstat(r0, &(0x7f0000000340)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) pipe2(0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(0x0, 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) sendto(r0, &(0x7f0000000040)="b6", 0x1, 0x1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x2f) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000000840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/199, 0xc7}], 0x1, &(0x7f0000000b80)=""/71, 0x47}}, {{&(0x7f0000005400)=@un=@abs, 0x80, &(0x7f0000005580), 0x0, &(0x7f00000055c0)=""/185, 0xb9}}], 0x2, 0x0, 0x0) 13:43:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4004ae8b, 0x0) 13:43:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20800) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000000009) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x88ee, 0x201, 0x4, 0x6a, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x9, 0xfffffffffffffffc}, &(0x7f0000000180)=0x8) r5 = accept(r3, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xffff, 'syz0\x00', 0x7}) 13:43:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x48000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4004ae8b, 0x0) 13:43:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xa000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4004ae8b, 0x0) 13:43:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x68, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6000000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x200000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) 13:43:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x1000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x6, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2618.034368] binder: 31325:31326 unknown command 1661403136 [ 2618.049986] binder: 31325:31326 ioctl c0306201 20000680 returned -22 13:43:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6", 0x4d}], 0x1}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x1ba}], 0x1}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d2}], 0x1}, 0x0) 13:43:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2618.267397] binder: 31337:31338 unknown command 0 13:43:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:49 executing program 3: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000002d00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2618.293677] binder: 31337:31338 ioctl c0306201 20000680 returned -22 [ 2618.393255] IPVS: ftp: loaded support on port[0] = 21 13:43:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x173) creat(&(0x7f0000000200)='./file0\x00', 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x240100, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x42000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x119400, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r2, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x400000000000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x4, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x60000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x500, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x4c00, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x3f000000, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:50 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:51 executing program 2: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x60000, 0x4) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], &(0x7f0000000200)=0x2) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xff, 0x8}, &(0x7f00000002c0)=0x8) renameat2(r3, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f00000000c0)) r5 = accept(r2, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x7a00, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xf, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046305}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:51 executing program 2: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2619.901401] binder: 31410 invalid dec weak, ref 427 desc 0 s 1 w 0 [ 2619.918496] binder: 31410:31412 got reply transaction with no transaction stack [ 2619.927819] binder: 31410:31412 transaction failed 29201/-71, size 0-0 line 2741 [ 2619.939636] binder: BINDER_SET_CONTEXT_MGR already set [ 2619.954777] binder: 31417:31418 ioctl 40046207 0 returned -16 13:43:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046353}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:51 executing program 2: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2620.001381] binder: undelivered TRANSACTION_ERROR: 29201 13:43:51 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2620.079251] binder: 31423:31424 unknown command 1074029395 [ 2620.087170] binder: 31423:31424 ioctl c0306201 20000680 returned -22 [ 2620.094030] binder: BINDER_SET_CONTEXT_MGR already set [ 2620.099677] binder: 31425:31426 ioctl 40046207 0 returned -16 13:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:52 executing program 0: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) listen(r1, 0x100000000009) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) r4 = accept(r1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) accept$inet6(r3, 0x0, &(0x7f0000000100)) 13:43:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x630b}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:52 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2620.626806] binder: 31440:31441 ERROR: BC_REGISTER_LOOPER called without request [ 2620.635804] binder: 31440:31441 unknown command 0 [ 2620.641095] binder: 31440:31441 ioctl c0306201 20000680 returned -22 13:43:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xffffff7f00000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x400c630e}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:52 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2620.774705] binder: 31456:31461 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2620.800602] binder: 31456:31461 got reply transaction with no transaction stack 13:43:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2620.824134] binder: 31456:31461 transaction failed 29201/-71, size 0-0 line 2741 13:43:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046307}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2620.908523] binder: BINDER_SET_CONTEXT_MGR already set [ 2620.924061] binder: 31466:31467 ioctl 40046207 0 returned -16 [ 2620.931541] binder: undelivered TRANSACTION_ERROR: 29201 13:43:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2620.981074] binder: 31470:31471 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2621.009302] binder: 31470:31471 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2621.038207] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.043518] binder: 31473:31475 ioctl 40046207 0 returned -16 [ 2621.049468] binder: 31470:31471 got reply transaction with no transaction stack [ 2621.049491] binder: 31470:31471 transaction failed 29201/-71, size 0-0 line 2741 [ 2621.119347] binder: undelivered TRANSACTION_ERROR: 29201 13:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x4008630a}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000002180)=[{{&(0x7f00000000c0)=@ll={0x11, 0xd, r4, 0x1, 0x8, 0x6, @random="2d9ce25f1003"}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="c6346bf516eaf3a642ee9889319ca9ee577c9377c0962fd8c910790b7bf1e8e84d19491d617edbc9d7cb387e22c766b3a5f288ef0a8c92d0895e4127cda9a7359c18b93269e90f712f9eaef79f4a94c1811102cb1b3e625c98698e19e294dfbda2d62e6bc44b533787ab16139e793d816f0eb7f6e973aef5eb5aade816afc33ae419fdd37899be9242b7b16a9c795d3cd28304dc3b3eba2b717efa9d832fa2568bbf5ccce82f8db246d30bfb107f27c48c264c6d3c49f1f3e88b16e1e60939fc5deaf7ee5dd7f6147ae08e1de0de0f44aaa5e17fa4373a3575fa9aed2698d3f5d243840a93f8e18f02"}, {&(0x7f0000000140)="62df7f03691655bb3b9c51a1"}, {&(0x7f0000000180)="d7a4211dbe12374e2f17c491bcab19d651f84c6df94da870b62e3fe928022543"}], 0x0, 0x0, 0x0, 0x4000}, 0x401}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="beb6edf0061e66f673433524784193b32a22ff43d96ea341a6eb98f641d8b31ea87b7c94285c7a6cbb"}, {&(0x7f0000000380)="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"}, {&(0x7f0000001380)="068b2aed31825697b056df22f2774ba7390b25d09ce458159da8ba12d632dede85fa4862f363cff2d19a92359e8df923bb2321f053f6e440035bfe2fd048ad33e627ae5e95b4c69deb1e865831d0b3fecbcafae035c49dbd0ce23bd98202258a76b20244113141823d6d881abed131d89f571b71136440cce2da315b2f0ebbfb921dadb141e3b8135a9744a21a77623fc27d6ca689bba6c0ead397c52ea9beca5777287132c81ccf8c59dca4bde9075c3b5a981f27a12d5b2cdb"}, {&(0x7f0000001440)="0fe1a81013f981140ffad1d4e7c596"}, {&(0x7f0000001480)="b6373e66e5a6add9f909a3e2fa5eadcec2fe90777d7a8575c7b66726b6f4009f5736ad531771559deb016b0e5b0d8aa9bdb671a8c54a4f62dbc30c3ea0808f132c5f3326786bd636d6ba1aba389ff77cf5e9a78cc9e2292f4cce4581876ff0c2e0ca87c3f8b9db29a9f39e6b854febec2246d7679952b138702012131950d3fcb1ed82c8ed220ae5b9d411060ac8940575edb289bb2bd061ba1df86c10c62e22d4511e7948432d2969a9c7d0c4764af36f14d0dd9566eb59c70b669eea8a4283c8a1a9be98d12db4aeb9f689b34ca62800b877c3b59ffd1fc30ca9e0adb2745636e9388cfe"}, {&(0x7f0000001580)="873873c2dff50b2d41b6e38b0c46b2c67fd4270837fa12c100246525d6b05880984fa614685a3209f595a82dc3f8e666190351aabf287a086c18"}], 0x0, &(0x7f0000001640)=[{0x0, 0x10a, 0x7, "13d8dde6a373439900034aa88fe69a2eb703d81be9ca09532092600b221394fdfe673ee27310bc02fb48b488e72b0a7124de78b55dab6c119a6b53cc48440541a070f45146affa0d7c7ca61ec14a63763430368ab2d0f67b7880b2b099dbf3953e8d023d1870fa6f78a19610b333f982133c3f801283269f84e5ff63d70b4342a40da7cf99816dac1320fa033cfd6f516f6dae9335c0308b4a2b5c2209956f32377669ef4f08534d98ca9fcd3f4eba84ffa4f3cbb257f87a3dbb2ba6478263afd7fecde9ec7d9d30e8b678f4c18e81b027e4cd98d1549f71867fa85905823746b50e531dd21766ba696c"}, {0x0, 0x0, 0xbd4, "b67f9ea750ed9a17d868e6445fe440dbb5ec4e639ef5a3833c7cf26f13387ec29be5c65b30251f2ef6aa0f5f14eb146bdf194ef26647d1b99325e2b59f7c4858b769dcf551576be289b840e7dd09"}, {0x0, 0x10f, 0x11d0, "a2a55d2050ab687d122d1d58ee20f1e7a832781a45de5344bfef395c83a86bec356390dcd1a64f5cb1caebd2f1ff0926e60ddb6550cfd0b444e45e7b340485d82e92923a48d5bc13986ec14c5a3e92b486fbcf13e1c4bb4c6f3623e6422fe964ecb83c2a5e32519fb1d44a174f8a7492a5556d83c8dcf8d82313574892d2ac50ec6235c0cb59516040c58504cba497f99d7567ba8acb4e8b0ff8f00c7aca7db0fcdc6ae9936e17"}, {0x0, 0x19f, 0x97, "48c94cbe1c2e97703f82ea27d69c12b7827947aa3325f6c48b094eab462f572e5628096b10847911eb1c389ae6410d5b3914c52ed84a47aa0c509dcff5f8a3012a0a04c0acff478d510dba042128003886e94cdebdde4a16e8f62153f5110df9c74b10f2f80dd0733ccb3bd73e5f67d384365beae74d60461f93d7195bd843dcd55df7d078bf839179ec00bb229dfd88ea9f1ba4f9d61ede8da0b7c57cdad5e3d237818a741c6756f14b8b62776ce54a2ab825cf32277d5cb2aca200c86152e5cecc2b8cc9f5a4297b0d07aedb5b"}, {0x0, 0x1, 0x6, "6dcfe1d3eb53559c3d34d77439522a2e5ea5f205b6287194a4672344f1336dff0430b8815e0ee4652074cc947afb88dc9a2f322a6ec908fb7c31f7a04b8c051b140d6f6ba19fcb5da13933a02c77ccf74b63fd8fcd539f35da669dde18bf2d569178a585a47516d5578a18d036fa4b4c96608cee4420e392bada92f04820904022433d5c1da316cb837402dcbbf1f55c0db1cdbd7c831b303cef725b6f06e4223c5256192d3e86302166a91910896496b8fe896fcc6bb24326668d9ddead81ec5fb76b7362dcdc8ffcc1f080134b9b7b7bffdd4b1f438e07f23bc15772711d4fdf71372adfa6375b1ea6"}], 0x0, 0x800}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="2c3eb7c0cc34b2b0027f8ecbdcd86220400eaa8a9f7277a80e7ca717b68fffebc35d8a8f1506eed926fe7187b7c00297a7b88ba9532d5520253c2f8eead3febfb9b037c456090ca1dd4a1df70e2246ed1b53c5c4c94d9b786850d5d9c8bc01e090e3a604d7372514415e05edc8de59629726e7e1675bc8bc0a"}], 0x0, &(0x7f0000001b00)=[{0x0, 0x6, 0x0, "8e603d810383142a51f81ab1da8327510d77b8007fa52d6432bab6ce4efcbcac"}, {0x0, 0x29, 0x6, "acdb4a"}, {0x0, 0x18c, 0x3ff, "e16a352cd8f15ad10ea3099b5965c50eb46e306a4e4adef50f3d6d7170958bdd1515e60dcf3df195b16372203141315088cf3e4bb3508042908cabad0e683e0d0adf55019748dd1cafaaa110"}, {0x0, 0x102, 0x0, "44f336427b6c8f86fe7560a92aaec52e984996869b1d5fdd326ad4cf96950b198a2255301849fde92e2ce7e1d170b0798555d37dd8e8d18eb33450a4877d625120ffb0ca595724a6e97ef61c72eeb36343c885e53731a9c41c129e1ec5ba1b3e2a625473e7510ba4f04fee07fe492bd29bc9c7c03a79fc6b2281306744eb81da1b163dd7b136ae82f459f397e2d22472"}], 0x0, 0x10}, 0x6}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="819de824dcd9331d"}, {&(0x7f0000001cc0)="cda3e1b5b02442119d9949116db3de2f651745a36c820563d33ca7676f2ff7e07a4857c88f0021b36edb1e18527ac98f14ac57608918c2c9c1334ea363312f9cb55c628d774299bbba34a27fe2e2c4da4dee6f2e71896e1221ad73d4ad3411dd08600dc6bc8f398d3ec6df95f9e7e0f163db045c6a1b2ed97a34c4118678687f20c172c70a57ed7e8ba77135a24f73dc8f668806887fd14035eddfe1b65c3bc4eb2d618e5c47499604d00130592434fc090abe05c6fc8d26dbebd6028d4fe838c408d6fba854cf212c038952e46f"}], 0x0, &(0x7f0000003100)=[{0x0, 0x6, 0x33, "efc864cf"}, {0x0, 0x29, 0x0, "bcf487f5a844d1c9e175465ca69c710d557be3a2e8b8cdd0e48efbfe0d58d40d391d38390bad8427303a079c928c9ed959a30b8c7ac87bf9ace7638fcca294c410beabea835949d995f9324cb6522f2b26dc9ebd80dffb4aca7ba55c46c5d2abaaed36b964ab334890a6e9f1712005ae3a2ab0d76cd2c54999d0d9639d625f6cf2bb17de498e77a217157bf727dd846c34d51c036b57767d40f01a4277eb6ccb0fe62883a6aaaab071494105560b3dfece37fee04f5edc1b9d70685b8a171a1e529d8a82c7fae98e8b84632a0bd88d8a3a127d9de8ab337169b3e9b38c2b266f7172711fec2c"}, {0x0, 0x10e, 0x266, "a19ce15838f88d69c816432123aefb38c8ecc1571804b987c25d015a628a97864ddf194f2e4fc0fee8340f0adf3a933bb3154b"}, {0x0, 0x117, 0x5, "058a44af9ed315383951c7642768a11add8488e5eafd2a142c4e11a6beaa01e76fe199064da2cc2cdc0471282f42bdf3eb8ece4fe3f862228326fa2fe9af85dd0a1b5f3278d72a45570e3482bd9ef84c9864b59c38dc8e3c3d5b6901359c14592b46d52909c0fae0a57c19db4b5f8a4c2897ccfb6b22d4a17a320541ac9f19b24a59b3435f0712fec1839f11c572a14d19e0a529abcb8acbe2f2ca9c38c792274abf94a4034a9c5240f26499"}, {0x0, 0x10f, 0x0, "c61d04e265a55b3383f8ea886b4ddc1560e2c47e33fa01b6b7d6f10fbee89e8093f247e88457108edcee25288543466548e409a7985e338cc8df72141659380ec5c4e5c235e6cb1096c803fd8471dcb66aaca8863b7886c0b4917494105525c9bbcbe1ef218de257a50aa6e9574ecd380bb336909c8d"}, {0x0, 0x10b, 0x6, "8883a1e33685bea196d3469b20c8865e21907f"}, {0x0, 0x88, 0x1, "59a91232e1e99ad35c174103d8122c3196e5c4f2cc09fefdc5455abf44aea01e039eba2c2d5bce4806723c290aa976c745369e79fec0f8d8ec568d4f6cae05e78cefadfbf032a4a4c0ff9d522586b26a73459c632f805429092a83a905934d0b471a60184a68cfe8054a2986d377bcf45750fe900895f04e30b5415b079f95331bbe26566538cfbb32c838b498254fecd9850ee9ef7c5e02a3a9ad195fb51f1214cecac973f0e1342299450966c81e4788c3ecf7795110e9a4573d82b5b530182709b323fb6017e080faba625072cdcc08e38f92d20f0212d0891b1f92ccfd015b0755"}, {0x0, 0x13f}, {0x0, 0x0, 0x1, "e1801a7b90cbda153bdc01069ecfd2485cc567b76fe14b83a94ec23bfd311f8861f7172ec0f9f140deb0bca8c72dcaa0deb4eec1cfca96319e84fe8bc46527b7d8f85ac0a85921a0f8efe2877134986bcbe07ebeb635050a25b56142b94c35b6db23eb470282d9bf998189c61d84aeefdbbd56cb42fa059463431b489097511ea07328172bf179c30ed69cee4a688cb5bae3f43a2ebde7da044a942ed31652943d4ffbb76451f0dbb91997ca35d0f8d9f35a225db021"}, {0x0, 0x101, 0xffff, "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"}], 0x0, 0x20048040}, 0x1}, {{&(0x7f0000001e00)=@hci={0x1f, r4, 0x3}, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="8e387f106a32ed63d43f8a67e1319d7a94279568a269ef559073448723910b565d336992cfd6270a302c744aef9ff84e8d870618ef4e7b2b0a41fe2a61ed09ef06685ba9b7661954795736b5cea0e227df9bb0cb12aae7496b22420651940c7633caf3001def57fa89d8f4a3dc9e028399a7a8534fe489c10a9b2b8cf51dc525fa65005997cad246656b5932365fcafe24ab7b9035b927e22ff06202a69bd25d8fd18e75dfab76511c"}, {&(0x7f0000001f40)="8b"}], 0x0, 0x0, 0x0, 0x4}, 0x6}, {{&(0x7f0000001fc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x4}, 0x0, 0x4, 0x0, 0x4}}, 0x0, &(0x7f0000002140)=[{&(0x7f0000002040)="c1ff30701e1b3ca601030dd8fb248716837ce9f083fe1282e4d5715eccf76cacb7894a03fda2b95999454bc37d472889e9b59d882865868573daf1350b47ce389f20c87907b764236730dd9d9f2d0c5e68d667d8a889af9e6348dc736d4312aaeeeada116c6ccab25ab15755900603d8a9f8247b3ea5927af8146e18e2ffa701a33b548eff58d1df6f219c6ce669b44562d9ccbe27ae"}, {&(0x7f0000002100)}], 0x0, &(0x7f00000045c0)=[{0x0, 0x115, 0x6e, "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"}, {0x0, 0x10e, 0x7, "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"}, {0x0, 0x11f, 0x3045b79, "d0e3"}, {0x0, 0x88, 0x7fff, "b84c78d20b11210cf9daf3bf469cc8e1d0a6375977183e2f2a2691b7ea2a3fdbbd28432dc9b34b513fce033eb7b1c84de1765a58231ef26df9e658f9c0c91f61181fc01a367e084e49813905da1449cfd157881763c373a355ac6dc3e527bef6b1bf0289cce3b12d05141d50f8afceaef522a775d4d339ec25545bc6bb6046945394abb63d0b348c817569d3f034aa73a9a67f9b416e87228dfcd71b311e108794c7e2ab68358ca74083f430b2db50a700ca5eda9e9934fa79e77d3d444bd097e18fc1fc502eb4f9"}, {0x0, 0x109, 0x2, "4e4ed38731c388ad97f1841d4e7d0ac8e298afb3ea165789d4a88c19873a2ff88d8d8e2d55476b494cc2ac627ce614f158362585ed7ac8"}, {0x0, 0x115, 0x4, "3daf1645fc901b95bd9568768717ac"}], 0x0, 0x40}, 0x7f}], 0x74ed2593842a5e, 0x8000) 13:43:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xc010000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2621.750657] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.761854] binder: 31489:31492 ioctl 40046207 0 returned -16 [ 2621.780091] binder: BC_ATTEMPT_ACQUIRE not supported 13:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2621.799021] binder: 31489:31492 ioctl c0306201 20000680 returned -22 13:43:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40486311}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2621.916164] binder: 31503:31504 got transaction to context manager from process owning it [ 2621.961949] binder: 31503:31504 transaction failed 29201/-22, size 0-0 line 2825 13:43:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40106308}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2622.006652] binder: BINDER_SET_CONTEXT_MGR already set 13:43:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2622.028147] binder: undelivered TRANSACTION_ERROR: 29201 [ 2622.033930] binder: 31509:31510 ioctl 40046207 0 returned -16 13:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2622.072598] binder: 31511:31513 BC_INCREFS_DONE u4004630700000000 no match 13:43:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2622.121650] binder: 31511:31513 unknown command 0 [ 2622.128444] binder: 31511:31513 ioctl c0306201 20000680 returned -22 13:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046312}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r3 = accept(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) 13:43:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xa00, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:54 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2622.676307] binder: 31540:31541 unknown command 1074029330 [ 2622.694809] binder: 31540:31541 ioctl c0306201 20000680 returned -22 13:43:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x630c}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:54 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2622.790389] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 2622.840375] binder: 31553:31554 unknown command 0 [ 2622.860508] binder: 31553:31554 ioctl c0306201 20000680 returned -22 13:43:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:54 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x400c630f}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2623.451469] binder: 31569:31571 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2623.488801] binder: 31569:31571 got reply transaction with no transaction stack [ 2623.496782] binder: 31569:31571 transaction failed 29201/-71, size 0-0 line 2741 13:43:55 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x10c, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @local}}, 0x2, 0x8, 0x8, "1bf81337b2296133533685aabb5c96e888ef018707e68c46d73f5151151ca5d3112fe0bb9ac75f2950217d59821f856c4363dd9c284e4f2b8e288c3df5fd05c0a76adb8728a9657825b00fe865aa628c"}, 0xd8) 13:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40086303}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2623.637672] binder: undelivered TRANSACTION_ERROR: 29201 13:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40106309}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2623.692864] binder: 31597:31598 BC_FREE_BUFFER u4004630700000000 no match [ 2623.702656] binder: 31597:31598 unknown command 0 [ 2623.709916] binder: 31597:31598 ioctl c0306201 20000680 returned -22 13:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2623.806298] binder: 31606:31609 BC_ACQUIRE_DONE u4004630700000000 no match [ 2623.831354] binder: 31606:31609 unknown command 0 [ 2623.859201] binder: 31606:31609 ioctl c0306201 20000680 returned -22 13:43:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x40030000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40406300}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(0xffffffffffffffff) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2624.481242] binder: BINDER_SET_CONTEXT_MGR already set [ 2624.493208] binder: 31633:31634 got transaction to context manager from process owning it [ 2624.501947] binder: 31635:31638 ioctl 40046207 0 returned -16 13:43:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2624.531150] binder: 31633:31634 transaction failed 29201/-22, size 0-0 line 2825 [ 2624.566027] binder: BINDER_SET_CONTEXT_MGR already set 13:43:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40406301}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2624.583551] binder: 31644:31645 ioctl 40046207 0 returned -16 [ 2624.605275] binder: undelivered TRANSACTION_ERROR: 29201 13:43:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) dup(r0) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2624.632991] binder: 31650:31651 got reply transaction with no transaction stack [ 2624.640725] binder: 31650:31651 transaction failed 29201/-71, size 0-0 line 2741 [ 2624.669156] binder: BINDER_SET_CONTEXT_MGR already set [ 2624.688020] binder: 31653:31654 ioctl 40046207 0 returned -16 [ 2624.705969] binder: undelivered TRANSACTION_ERROR: 29201 13:43:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046302}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2625.169526] binder: BC_ACQUIRE_RESULT not supported [ 2625.174801] binder: 31660:31662 ioctl c0306201 20000680 returned -22 13:43:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x8000000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x8400, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x34edd1eb) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x5, 0x20, 0x8, 0x200}, 0x8) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40486312}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2625.378850] binder: 31675:31681 got reply transaction with no transaction stack 13:43:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046354}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2625.423344] binder: 31675:31681 transaction failed 29201/-71, size 0-0 line 2741 [ 2625.441878] binder: BINDER_SET_CONTEXT_MGR already set [ 2625.451445] binder: 31685:31686 ioctl 40046207 0 returned -16 [ 2625.465057] binder: undelivered TRANSACTION_ERROR: 29201 13:43:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2625.503142] binder: 31690:31691 unknown command 1074029396 [ 2625.522574] binder: 31690:31691 ioctl c0306201 20000680 returned -22 [ 2625.548222] binder: BINDER_SET_CONTEXT_MGR already set [ 2625.570197] binder: 31693:31695 ioctl 40046207 0 returned -16 13:43:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x630d}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2626.038932] binder: 31699:31700 unknown command 0 [ 2626.043849] binder: 31699:31700 ioctl c0306201 20000680 returned -22 13:43:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x40000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:57 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{r1, r2+10000000}}, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) listen(0xffffffffffffffff, 0x100000000009) r3 = accept(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x8001, 0xfffffffffffffff7, 0x3, 0x6, 0x5, 0x100000001, 0x7, 0xfffffffffffffff9}, &(0x7f0000000200)={0x9, 0x43b, 0x9c1, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffff}, &(0x7f0000000240)={0x3, 0xffffffffffffffff, 0x7000000000, 0x4, 0x40, 0x9, 0x50}, &(0x7f0000000280)={0x77359400}) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40086310}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2626.212275] binder: 31716:31719 BC_DEAD_BINDER_DONE 4004630700000000 not found [ 2626.220754] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.229154] binder: 31716:31719 unknown command 0 [ 2626.239196] binder: 31718:31720 ioctl 40046207 0 returned -16 [ 2626.248186] binder: 31716:31719 ioctl c0306201 20000680 returned -22 13:43:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046303}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x494000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffefffc01) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfffffffffffffffe, 0x400) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) 13:43:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2626.350778] binder: 31727:31729 unknown command 1074029315 [ 2626.380796] binder: 31727:31729 ioctl c0306201 20000680 returned -22 [ 2626.389143] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.399842] binder: 31733:31734 ioctl 40046207 0 returned -16 13:43:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x60}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2626.475294] binder: 31739:31741 IncRefs 0 refcount change on invalid ref 96 ret -22 [ 2626.496763] binder: 31739:31741 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2626.507082] binder: 31739:31741 got reply transaction with no transaction stack [ 2626.514867] binder: 31739:31741 transaction failed 29201/-71, size 0-0 line 2741 [ 2626.548974] binder: undelivered TRANSACTION_ERROR: 29201 13:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x3000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x800000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2626.998110] binder: BINDER_SET_CONTEXT_MGR already set [ 2627.008178] binder: 31755:31758 IncRefs 0 refcount change on invalid ref 50331648 ret -22 [ 2627.034339] binder: 31757:31759 ioctl 40046207 0 returned -16 [ 2627.040596] binder: 31755:31758 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2627.052222] binder: 31755:31758 got reply transaction with no transaction stack [ 2627.063487] binder: 31755:31758 transaction failed 29201/-71, size 0-0 line 2741 13:43:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2627.111132] binder: undelivered TRANSACTION_ERROR: 29201 13:43:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sendmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)=@ax25={0x3, {"5bf9b665ae9708"}, 0x8000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="c4d776f40d7a80b0dcfd873ef1667b0924d591adc9ebedbd123643709ef2d27afb476ccc3c5fee84c905eff87cf236046dc3dafdd5a3ae64fd7ba488f909aa41b52b195da35ec9431a70e2f012bec7004bf9214bc4dba611e61d39a197ed6ffc6957cc579598e2de99d1f37fd4544dc98bcab21895648453e1e22f5c6569f682adcafa0b037270d0095791d3a9f90dedc8dd8684811995cbbb7287e7a251e9d0b1323fbdefa103be2b31cbf0ed3ce75df76f9ba86c9681cfc55380369b70e5b58bb964cedf70805a1a7c5271", 0xcc}, {&(0x7f0000000100)="758be2addeaf736a8ea7cb8b16048f655f9ca9d7730d0bd190f1b47424f95599eca47aff8287789c52521fe81a22a63b1597bfd6df48062791e8b5", 0x3b}], 0x2, &(0x7f0000000300)=[{0xf0, 0xff, 0x0, "fcff1bfb62cf96658f10c24eee886ed7f7b9bd01563303ad2add139ef1cc41b601456c27cd3b79a325773db70a4f47a1db3a226a94deb9906073130df1d9714ab01ddc8d518b1002073a1bfdfbd2d69759c6a096b67b8040e01ee83f14209130f8956fcce2e4050abc3d7e039db23c3ed752720a1f694c3d775bd77b9155b8144f9a6be6295ba25e076fa5874745f923678ec2a9668aace883c4551d81dc65c8913222af5b813d40ed529a73c47bd6d7621765ce330ae5fd86368a83072acf1d8f573dc3909cfc1115831def3429ddc7f9ea9acccff485fdd7fa6e28554fde"}, {0x110, 0x10d, 0x100, "bb07daca00fbd583fab194fdabcccf002621af93383e3af7d97e7306d336ebc883565b0d104dfe4948603cf3b4fa87624b8392600b796fc852c7dc8b461f50bc578f8401717a0754695f7828353008d30f46c26d1057dc9f3a77921dab7d68d7672188718a4e47385bcef4cd9535d798e8e4e8e98fe8ce9d373e8889f67c884deb249e02a45b36e88eebbe19e872ce973a53a64c163ab97cda6b14c9ab026890b97bda5a98d285328b7ea4f15bed5729ba6963ed57df40a02f5997d686163f4f1ceab663baff9a85b1f703a84bc90b9f6a30d749cfb8ba9173cb372a8d93c880418ef677fbd875202ae6bd9d8ac4ee9c089e08caf5993981d13c1db8c5"}, {0x20, 0x11, 0x7, "b2084c22a98fd7a74ed4"}, {0xc8, 0x110, 0xfffffffffffff4b8, "378633cf059230ed52bb8d698939af7c5f1998a732c9c69bb8198a604cf0a25251a35ed6588e63f1fc2ee4ed4b1c7577ea9a4f3fdf072153c49aef6e8b06b33dcdf0dfb3584ceafff80d9a18172276e6aec08098d1566f51864d6333be9d8a3324459ae6d66c57c086a28c9e8e718c3620599becddf1dfb9a6a0a20f5b2738bd0eea0c4f45a3ededf275dce66e4ace5a0b757c9daa544ca449f062bfdc09b5f363287326b53b3a85b0a5e136e6d517176634"}], 0x2e8, 0x4000}, 0x40}, {{&(0x7f0000000640)=@hci={0x1f, r3}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="8c4b72e00653425ffc923393244fe402ed5c28fc2b38c6caa148fa8534383a30219f3cd4b7a8a3e7d0c4fae9486aa37533fbdeb524eda00677386d10b7d630614d7ca9f950f92636c091e23788db5ba78d95a2b456304175a0294b12872ca76de42e59635195c5cc55b0e7555719a9081d284794a00289b17f0dce160063eb84293af0e6188c1ef6acd27643d7f3de66bd4fd096c470b15284ba87901d793778d0304ff4537a19b7ac86ddb02a70de", 0xaf}], 0x1, &(0x7f00000007c0)=[{0x1010, 0x11f, 0x6, "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"}, {0xd0, 0x11f, 0x2d, "6af247b1a30e622dd36919dceec8c753edc33fb93d0c96dfe2209584f4a998a6884935c94733a01593df7cbb38d54a6579c848e1cedbc14f03b674c4637aff342189d771d03053c32df3906a846e08c1f41dd07f4ad5ad5073707b4ba222f3d6c278528fac6068fc44e240a4edbf2242904141a7d2bb8a1e993d2fff3c674f6287a4fc898f375f4bf345ce2eeb1ea658d6d7c55c8d5e523f0207b29c9ce97bcb2332984ddf3bcc35cdbe848a3dfaa73da2d586131d10b0bd1603ab6e15da633e"}, {0x80, 0x111, 0x1, "27bc2316dda55f47e14ef533ed331cdb919b53f50a23b4de3581f768c20fcfcfcb14fc1fc18befd9b62fad39608bcffb4ab2d41706fdf1f0df3b7ffa7b83c4a3a9ee0363a45e676bde606db536490a69d04446df57def5ac3668bb6812c2dc6cfab1be02b6efa6c45d540d633e33"}, {0x110, 0x109, 0x8, "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"}, {0xd8, 0x11, 0x10001, "009a8dd77dd1222a0e4381a600acf17c66e6845340a97b806572c3de03e3d11874129fef8339da7a6ac6f3ea84024fbf19d9b1eeea9f4c8bd86620d2bcf4a8959bc57b807b23e9895167a85ec6382bf338525b16c1247174964ee43446f0fb9f4c677171045ee141f2890dc87be61d522cfc7349415108018d5ffcfbeb89a6c28460791975e50a13b36021931367c897959954e73c24484c93bda9f35354405d6a6f415c1c3e3829c715fba1ba927bbbe65946237f1e3200ccede789905ed66df3c04d637caf"}, {0xa0, 0x110, 0x0, "f3df0989cef0f4d7f75a9c35163d703457f77ee63bfb100e4f1b1a0d8787c51dba5849c4609966c2c1314298a24eff95476c9280ae25b572c11114934f154252cf95d78951e92828ff3361e27fa76d002a892e42430d1fdecddda13e719907627f7c7033c91932595f722a523f6a6181f545aba0a9a1027a7f2a7d26c957e7c83b5df14d5891f5fe4b"}, {0x38, 0x100, 0x3f, "4f42329466f09a32f54b31507323575ebb89edf7d07730351a6a7210724d6c0c84f4a5da2c7adc"}, {0x100, 0x101, 0x1f, "90ed36650bbc512b568f315b443727e3256197b0d7c1ff103e4a6d6bde49406042ecbbe2914b9c432c8d0ca7c16908590250677074eb70a291f94d14f1dc4e218290ef2787045d8ca2a209e1a2ca3165240f92ea63e94db27ec672cddedf383db37e51b76e92c1bb436f57beab589293396d10855a4b4711840ffe1bdebaeb3fb1d738147a061a2d9b0c81f5267818913e35e533d0f3d97cb9f75755a11275acfcf3178b6ff4165b37841aa889138f68268466771d108fc6e2fe4962f8b29490723bd8e2cc59089058815612dac36f83a03880f262a96e6b8185f58af1eea3d0a8a45844f47e040ec044ef63a690"}], 0x1520, 0x4000}}], 0x2, 0x94) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r4 = socket(0x8, 0x0, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000004100)={0x0, @in6={{0xa, 0x4e24, 0x8001, @remote}}, 0x9, 0x9, 0x8001, 0x0, 0x24}, &(0x7f00000041c0)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000004200)={r5, 0x2a, 0x2, 0x1000}, &(0x7f0000004240)=0x10) r6 = accept(r2, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:43:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2627.262507] binder: BINDER_SET_CONTEXT_MGR already set [ 2627.273832] binder: 31778:31780 ioctl 40046207 0 returned -16 [ 2627.282752] binder: 31778:31780 IncRefs 0 refcount change on invalid ref 24576 ret -22 [ 2627.291971] binder: 31778:31780 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2627.300417] binder: 31778:31780 got reply transaction with no transaction stack [ 2627.320169] binder: 31778:31780 transaction failed 29201/-71, size 0-0 line 2741 [ 2627.361594] binder: undelivered TRANSACTION_ERROR: 29201 13:43:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:43:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xa00}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2627.714932] binder: 31791:31793 IncRefs 0 refcount change on invalid ref 2560 ret -22 [ 2627.723776] binder: 31791:31793 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2627.731734] binder: BINDER_SET_CONTEXT_MGR already set [ 2627.737124] binder: 31790:31794 ioctl 40046207 0 returned -16 [ 2627.743520] binder: 31791:31793 got reply transaction with no transaction stack [ 2627.751398] binder: 31791:31793 transaction failed 29201/-71, size 0-0 line 2741 [ 2627.784792] binder: undelivered TRANSACTION_ERROR: 29201 13:43:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x4000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:43:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2627.870165] binder: 31803:31805 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 2627.879603] binder: BINDER_SET_CONTEXT_MGR already set [ 2627.889212] binder: 31803:31805 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2627.905853] binder: 31802:31806 ioctl 40046207 0 returned -16 [ 2627.909132] binder: 31803:31805 got reply transaction with no transaction stack [ 2627.931949] binder: 31803:31805 transaction failed 29201/-71, size 0-0 line 2741 [ 2627.972887] binder: undelivered TRANSACTION_ERROR: 29201 13:43:59 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000200)={0x40, 0x2, 'client0\x00', 0xffffffff80000000, "cd35fbc3af7582fa", "0c713fc15f966faa6b8f5326150e3b9de65b7a916e00e0ac5b8a4b3678260129", 0x6, 0x1}) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:43:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:43:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4c00000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:43:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2628.122560] binder: BINDER_SET_CONTEXT_MGR already set [ 2628.137416] binder: 31819:31820 ioctl 40046207 0 returned -16 [ 2628.143598] binder: 31818:31821 got reply transaction with no transaction stack [ 2628.155235] binder: 31818:31821 transaction failed 29201/-71, size 0-0 line 2741 [ 2628.222179] binder: undelivered TRANSACTION_ERROR: 29201 13:44:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7a00000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2628.578466] binder: BINDER_SET_CONTEXT_MGR already set [ 2628.587592] binder: 31838:31839 ioctl 40046207 0 returned -16 [ 2628.593668] binder: 31833:31834 got reply transaction with no transaction stack [ 2628.601850] binder: 31833:31834 transaction failed 29201/-71, size 0-0 line 2741 [ 2628.630636] binder: undelivered TRANSACTION_ERROR: 29201 13:44:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) 13:44:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x9, 0x8, 0x6, 0x2, 0x8}) 13:44:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xc01000000000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x3f000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2628.731932] binder: 31844:31846 got reply transaction with no transaction stack [ 2628.746494] binder: BINDER_SET_CONTEXT_MGR already set [ 2628.752472] binder: 31844:31846 transaction failed 29201/-71, size 0-0 line 2741 [ 2628.769064] binder: 31847:31849 ioctl 40046207 0 returned -16 13:44:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4c00}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, 0x0) [ 2628.816724] binder: undelivered TRANSACTION_ERROR: 29201 13:44:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2628.871529] binder: 31858:31860 got reply transaction with no transaction stack [ 2628.879586] binder: BINDER_SET_CONTEXT_MGR already set [ 2628.879789] binder: 31858:31860 transaction failed 29201/-71, size 0-0 line 2741 [ 2628.888777] binder: 31859:31862 ioctl 40046207 0 returned -16 [ 2628.960132] binder: undelivered TRANSACTION_ERROR: 29201 13:44:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x500}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) 13:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40106308}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2629.417140] binder: BINDER_SET_CONTEXT_MGR already set [ 2629.434552] binder: 31874:31875 ioctl 40046207 0 returned -16 [ 2629.447362] binder: 31874:31875 BC_INCREFS_DONE u4004630700000000 no match [ 2629.455157] binder: 31874:31875 unknown command 0 [ 2629.460557] binder: 31874:31875 ioctl c0306201 20000680 returned -22 13:44:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000000c0)='@trusted*\x00'}, 0x30) ptrace$getsig(0x4202, r3, 0x5, &(0x7f0000000140)) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r4 = accept(r2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4, 0x303281) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000340)={0x0, 0x0, 0x3}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x1c}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @remote}, &(0x7f00000002c0)=0xc) bind$can_raw(r4, &(0x7f0000000300)={0x1d, r6}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x85, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) 13:44:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x8000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6c}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) 13:44:01 executing program 3 (fault-call:6 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x700000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2629.631910] binder: BINDER_SET_CONTEXT_MGR already set [ 2629.647934] binder: 31896:31898 ioctl 40046207 0 returned -16 13:44:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) accept(r1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(rmd128)\x00'}, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="036381056ee49f730126d17ccc709bb3a4d2e024ac265c885805db250eb167cb2342abcf2647440a83a8fdb5640b032e8b574f0af03029f2c716b883a522bae425244884e86fc9b18ce16a50ed3eb28e55692f546fd6815eac9662b49e17f2c8e9ced51f8b7dff737fd3d6535c004ced524791dc0cb7d582ca140dd628fbbbdcd81bfb3dd9374b61680336019a44ef9b32"}, {&(0x7f0000000200)="205e133c2205f70f1bc19a3d8d44c99d43c5f89ae96a743b416cef5434201b04b8a79ddb03842c"}], 0x0, &(0x7f0000000280)=[{0x0, 0x11f, 0x8825}], 0x0, 0x8000}, 0x1}, {{&(0x7f00000002c0)=@generic={0xa, "ebc90383a8bd780e6b13f53ccadf4de2f00cf17aee7bfa23ade2b930448e2616091f5a56391523ce306a892b02f7efca3f92c776b08e60ad881727a10b1f4fad110510075b746cf4caf5d8c3a4f6e95924f36a72fd836785fc98da79659c9270331ecd599dee6f59f0da28ccaba5eb9b978f302c093ea504efa38479dbd3"}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)='f'}, {&(0x7f0000000380)="ff573ef8fe0af3662824df37883e81c40ee001a078323376d474a3a3805a0826c7bd298249f9c38821b88450d55fd796b57ec30bd4454c8d9edf2240527ff3bab40833fb8e50b1a706cda94643bdf49b2abf0cf1f4ab54b1057e4026b89033d567cbb9ee98198e168200b19caa4335684dd2d7c577"}, {&(0x7f0000000400)="ced1260048f300fc962db68ccb073564138db1cbf572427fc79ff7fc3faff0b81dd3e5d734a08c7e7a0753be4250d90045ac6c4e5c2869a6a4f085fc36616ee07b6b7e1084b22f1440b9353c74c01e5aa32d9a2a68675e6f4028a72947671b58a32589d3aacf3ad5cfacbedc89f2201a66941131e154cb205a10a9e0bad00e27f0097c2ea32e2f0f22d15f3f371eadb3254e354189bf"}, {&(0x7f00000004c0)="0e09a5c3214d9e364f6c23410ce77e7a72ec04cf03898381c5a4cd954871c0aa6cdfe4676f1e0b0d0a274d02614142e7a3bd759929af7be10eb5a49fff16556f522026c4781e87c6924ba9bac390cbee86c059df46f2e68e123515a882a541ab8fc675cb70348a545c38fdfd13466c6ae717c661a939a4bdee2f393d6af8f80cb2ef50c9594cfe015653aa65deddb7ba090be65174d00cbcd67a82"}, {&(0x7f0000000580)="b8dd2356d57e724ab975988fbcf37b6ae41a4d2a08290f447275a8779d63223e8a07ccd505"}, {&(0x7f00000005c0)="f4466c311ed326df6ddb541de4f327b5fd48b01603c126c95e83b166ee201818372385ef686bf7779951c59ad4e2b1bfd96783d1f3de318fdd9839f9004a566e5bc52a5f3d9dfe2bc24290e6cd4aba0ba7c22ab9de21c4746c7b134d656a6b96fab79f92fe6b84b7cab08495ac900c5abaa39c3a5456400746318a2837516c2a518ac60f1c6d3b7515adad4b1e30b7de47aba6c9d4e83c879facef27398b13bdc75a32b6b66fb0a96cfed512106f8ef95642d8ac0e5cd4aafceb2df3eb0cad37d884e02f82b93025ad003fad7ea17b0052ccab9d96685a790776c7"}, {&(0x7f00000006c0)="a526d58afdfc3213e60d8c849712efee0d88cdb926343aff29e4b7b7f113a1310ba512439ca9bf91641fd4b8be59a10c645bee81f737269015a5a70cd2505d94e4e0d3d02e884ba44da44466d670a83ffa185ee48fd44c90d59e1c89d7c1d13551923b44e59355a50e46d097cd756ec168b111886055c7a5fb6d6cebeab92e346612aecc4cfd64ad5b9943193aefd6588b85"}, {&(0x7f0000000780)="d1745236a512db5a644f7c9f344bc41fcbde838650291791c96055fe204fa0c00799db3cb31023b6530f407d55149617c90ae1cfba021298f4f63c15973e8cff004bfee07153d9deba797f8e9a07606a26af709e1791a0a8a38c15bb2818e63985ce81cf869400216571f6c002c6e41755575af825688e3721db47848bb5e8c012a5b5b828b91c4a0cdd5f2397dd29f224324d45954f9fceb8744b6baf630072d6e62a8a5c2c87a70f23fa58635d45d4a29d046dcc60b118b9a1d264f09ca94bb13b83c9068167bcab"}], 0x0, &(0x7f0000000900)=[{0x0, 0x109, 0x7fff, "ebe079c308e4bc83f678e3984e9c6cd3a5659c5cf77eb97e28ed856849c009cfad55e9635b5fe24fbf8a77ba1df57f2810ef70c2a9827e313d6bcacff7d7752e47013c789bce9613aa0f1264e863119214b6c359e57afffea59707fff6a10a839eca4b24183f50f5eacf553b36155ffd5f62d2104fdd1ffe6bd0b6aa22d86e8a4a86da493da39abe7def77e4481cc8dff4f9400cb3def556f209f7e533414c3f9628d507ad6caeec3d93e198d157b570adee044ce6e79e7782565e25278f2f5b7c6c5979d9b5d6008007f742807d92bac4228243334430f58f174f375d6c34"}, {0x0, 0x0, 0x3, "0af77e744327ac184b46f83a7b9aa67dc42290568a187aab9afca3566db42cae4bf1acb170a97d5511f6868b07a48d7b155a98b8510cf60de009c08bddefb6e00e3e932c741c1166639135bc3489e72df40d2ebb20f36627680b07cfa73956cac11209e659ce9947639893"}, {0x0, 0x115, 0x6, "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"}, {0x0, 0x104, 0x400}], 0x582f8b68f331c817, 0x40}, 0x7fffffff}], 0x400000000000294, 0x800) 13:44:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4004ae8b, 0x0) 13:44:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x600000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, 0x0) 13:44:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x2000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2630.270079] binder: 31916:31917 ioctl c0046209 0 returned -22 [ 2630.270602] binder: BINDER_SET_CONTEXT_MGR already set [ 2630.288733] binder: 31915:31920 ioctl 40046207 0 returned -16 13:44:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xffffff7f, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, 0x0) 13:44:01 executing program 2 (fault-call:6 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x20000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2630.473350] binder: 31931:31934 ioctl c018620c 0 returned -14 [ 2630.489681] binder: BINDER_SET_CONTEXT_MGR already set [ 2630.495005] binder: 31937:31938 ioctl 40046207 0 returned -16 [ 2630.506380] binder_transaction: 5 callbacks suppressed [ 2630.506388] binder: 31937:31938 got reply transaction with no transaction stack 13:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5452, 0x0) [ 2630.533300] binder_transaction: 5 callbacks suppressed [ 2630.533318] binder: 31937:31938 transaction failed 29201/-71, size 0-0 line 2741 13:44:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc020660b, 0x0) 13:44:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xffffff7f}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2630.612623] binder_release_work: 5 callbacks suppressed [ 2630.612630] binder: undelivered TRANSACTION_ERROR: 29201 [ 2630.659719] binder: 31949:31950 got reply transaction with no transaction stack [ 2630.661377] binder: BINDER_SET_CONTEXT_MGR already set [ 2630.674538] binder: 31951:31952 ioctl 40046207 0 returned -16 [ 2630.689658] binder: 31949:31950 transaction failed 29201/-71, size 0-0 line 2741 [ 2630.747623] binder: undelivered TRANSACTION_ERROR: 29201 13:44:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x40049409, 0x0) 13:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, 0x0) [ 2631.117165] binder: 31961:31962 ioctl c018620b 0 returned -14 13:44:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0xa, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x74}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40049409, 0x0) 13:44:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4020940d, 0x0) 13:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5451, 0x0) [ 2631.349343] binder: BINDER_SET_CONTEXT_MGR already set [ 2631.359188] binder: 31976:31980 ioctl 40046207 0 returned -16 [ 2631.409219] binder: 31976:31980 got reply transaction with no transaction stack [ 2631.418810] binder: 31976:31980 transaction failed 29201/-71, size 0-0 line 2741 13:44:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x9) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x448, 0x118, 0x118, 0x118, 0x118, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x3, &(0x7f0000000100), {[{{@ipv6={@mcast1, @local, [0xff, 0xffffffff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x32, 0x1f, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@set1={0x28, 'set\x00', 0x1, {{0x401, 0x7, 0x2}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x8000}}}, {{@uncond, 0x0, 0x138, 0x260, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x0, 0x8001, 0xfffffffffffffffc}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x8906, 0x3, 0x1, [0x8001, 0x1, 0x4, 0x1, 0xa8a, 0x7, 0x27, 0x80, 0x1ff, 0x80000001, 0x2, 0xffff, 0x8, 0x7, 0x8c], 0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffffffffff001, 'system_u:object_r:getty_etc_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r4 = accept(r2, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x11}, 0x7c}], 0x1, 0x82) 13:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) 13:44:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048ae9b, 0x0) 13:44:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x300000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2631.462757] binder: undelivered TRANSACTION_ERROR: 29201 [ 2631.527663] binder: BINDER_SET_CONTEXT_MGR already set [ 2631.546488] binder: 31991:31996 ioctl 40046207 0 returned -16 [ 2631.546526] binder: 31994:31998 got reply transaction with no transaction stack [ 2631.557656] binder: 31991:31996 ioctl 40046205 0 returned -22 [ 2631.578881] binder: 31994:31998 transaction failed 29201/-71, size 0-0 line 2741 [ 2631.637777] binder: undelivered TRANSACTION_ERROR: 29201 13:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5450, 0x0) 13:44:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x2, 0x0) 13:44:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x300}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2631.970553] binder: BINDER_SET_CONTEXT_MGR already set [ 2631.989331] binder: 32007:32010 ioctl 40046207 0 returned -16 [ 2632.002526] binder_thread_write: 16 callbacks suppressed [ 2632.002540] binder: 32007:32010 IncRefs 0 refcount change on invalid ref 768 ret -22 [ 2632.016443] binder: 32007:32010 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2632.024883] binder: 32007:32010 got reply transaction with no transaction stack [ 2632.032925] binder: 32007:32010 transaction failed 29201/-71, size 0-0 line 2741 [ 2632.081757] binder: undelivered TRANSACTION_ERROR: 29201 13:44:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x2000000, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046207, 0x0) 13:44:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x8138ae83, 0x0) 13:44:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xfdfdffff00000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2632.179075] binder: 32021:32022 got reply transaction with no transaction stack [ 2632.186577] binder: 32021:32022 transaction failed 29201/-71, size 0-0 line 2741 [ 2632.196529] binder: BINDER_SET_CONTEXT_MGR already set [ 2632.209741] binder: 32023:32024 ioctl 40046207 0 returned -16 [ 2632.218104] binder: BINDER_SET_CONTEXT_MGR already set [ 2632.224177] binder: 32023:32024 ioctl 40046207 0 returned -16 [ 2632.235154] binder: undelivered TRANSACTION_ERROR: 29201 13:44:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x7fffffff, 0x1f, 0xffffffffffffffe8, 0x80000001, 0x5, 0x9, 0x100, 0x6, 0x4, 0xf61, 0x9}, 0xb) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4800000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x4020940d, 0x0) 13:44:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x5451, 0x0) 13:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5460, 0x0) [ 2632.419794] binder: BINDER_SET_CONTEXT_MGR already set [ 2632.426977] binder: 32038:32041 ioctl 40046207 0 returned -16 [ 2632.435248] binder: 32038:32041 got reply transaction with no transaction stack [ 2632.452473] binder: 32038:32041 transaction failed 29201/-71, size 0-0 line 2741 13:44:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x1000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc0045878, 0x0) [ 2632.484679] binder: undelivered TRANSACTION_ERROR: 29201 [ 2632.546582] binder: BINDER_SET_CONTEXT_MGR already set [ 2632.555980] binder: 32051:32052 ioctl 40046207 0 returned -16 [ 2632.571270] binder: 32051:32052 IncRefs 0 refcount change on invalid ref 16777216 ret -22 [ 2632.598637] binder: 32051:32052 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2632.606378] binder: 32051:32052 got reply transaction with no transaction stack [ 2632.627833] binder: 32051:32052 transaction failed 29201/-71, size 0-0 line 2741 [ 2632.662806] binder: undelivered TRANSACTION_ERROR: 29201 13:44:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x8090ae81, 0x0) 13:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0189436, 0x0) 13:44:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6800}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x400300, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2633.041619] binder: BINDER_SET_CONTEXT_MGR already set [ 2633.045181] binder: 32062:32063 IncRefs 0 refcount change on invalid ref 26624 ret -22 [ 2633.064479] binder: 32064:32066 ioctl 40046207 0 returned -16 [ 2633.065390] binder: 32062:32063 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2633.098092] binder: 32062:32063 got reply transaction with no transaction stack [ 2633.116057] binder: 32062:32063 transaction failed 29201/-71, size 0-0 line 2741 [ 2633.152308] binder: undelivered TRANSACTION_ERROR: 29201 13:44:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x81a0ae8c, 0x0) 13:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x2, 0x0) 13:44:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xfdfdffff}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2633.276068] binder: BINDER_SET_CONTEXT_MGR already set [ 2633.283064] binder: 32084:32085 ioctl 40046207 0 returned -16 [ 2633.291665] binder: 32084:32085 IncRefs 0 refcount change on invalid ref -33685505 ret -22 [ 2633.300538] binder: 32084:32085 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2633.312423] binder: 32084:32085 got reply transaction with no transaction stack 13:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x5421, 0x0) [ 2633.320201] binder: 32084:32085 transaction failed 29201/-71, size 0-0 line 2741 13:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, 0x0) 13:44:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x68}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc020660b, 0x0) [ 2633.387005] binder: undelivered TRANSACTION_ERROR: 29201 13:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, 0x0) [ 2633.434218] binder: BINDER_SET_CONTEXT_MGR already set [ 2633.449963] binder: 32099:32100 ioctl 40046207 0 returned -16 [ 2633.464358] binder: 32099:32100 IncRefs 0 refcount change on invalid ref 104 ret -22 [ 2633.473369] binder: 32099:32100 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x20000540}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x48}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 2633.921151] binder: BINDER_SET_CONTEXT_MGR already set [ 2633.926876] binder: 32114:32118 ioctl 40046207 0 returned -16 [ 2633.942409] binder: 32114:32118 ioctl c0306201 0 returned -14 13:44:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/237, &(0x7f0000000100)=0xed) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x10000, 0x5, 0x81, 0x4]}, &(0x7f00000000c0)=0xc) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x8004ae98, 0x0) 13:44:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6c00000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xc000000000000000}, 0x28, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) 13:44:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7400000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) dup2(r4, r3) [ 2634.170388] binder: BINDER_SET_CONTEXT_MGR already set [ 2634.181006] binder: 32130:32131 ioctl 40046207 0 returned -16 13:44:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x5421, 0x0) 13:44:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x500000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2634.284618] binder: BINDER_SET_CONTEXT_MGR already set [ 2634.307198] binder: 32142:32143 ioctl 40046207 0 returned -16 13:44:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x68000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:06 executing program 3: ioperm(0xb0a, 0xff, 0x9) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x201, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x7}, @window={0x3, 0x974a, 0x1}, @mss={0x2, 0xc9a8}, @mss={0x2, 0xfffffffffffffffb}, @mss={0x2, 0x1}, @window={0x3, 0x4, 0x6}, @window={0x3, 0x200, 0x200}, @mss={0x2, 0x5}, @sack_perm, @mss={0x2, 0x8}], 0xa) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r1) r3 = dup2(r1, r2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'ip6gre0\x00', 0x1}) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x8, 0x1, 0x5}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2634.886048] binder: 32155:32157 ioctl 8934 20000100 returned -22 13:44:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) listen(r2, 0x80000001) 13:44:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x5460, 0x0) 13:44:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) futex(&(0x7f0000000000)=0x2, 0x8f, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) r1 = dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 13:44:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x5}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) 13:44:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc0045878, 0x0) 13:44:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x200000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2635.120496] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.135278] binder: 32185:32187 ioctl 40046207 0 returned -16 13:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8001, 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r0) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0xc}, @void, @ipx={0xffff, 0xd6, 0x1, 0x15, {@broadcast, @broadcast, 0x2}, {@current, @random="0fc35a0f8f1d", 0x2000000000000}, "30070bbc9c7a3101e06758dcff4a6846f85f2d4471cea9a5e1d61feb593eadffab8e543af2550b5f7d0210cefd8dd26733a8d1fd42a8bde9a384633e78080ff74c8c92bbf1fabfe9dbf6fb445a083816c5f24d6641c73f906aba1f0f6e09d75121762dc6f066979f9218b0a98a978f7fbd340fdbeb16abebd9ff218b0cf6f63215857a14daa9920e67943bd5d84c982a8ab0e9fca44146da3047fc551a37a5ca63df945e3bf9e1d7e62326eade3a772c8f98723371eb0472"}}, 0xda) 13:44:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4138ae84, 0x0) [ 2635.220734] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.231378] binder: 32193:32196 ioctl 40046207 0 returned -16 13:44:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = accept(r1, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xc3a8, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000140)={0xffff, 0x8, 0xd5, 0x3, 0xfffffffffffffff8}) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae99, 0x0) 13:44:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2635.899164] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.905828] binder_transaction: 9 callbacks suppressed [ 2635.905837] binder: 32214:32216 got reply transaction with no transaction stack [ 2635.921838] binder: 32215:32217 ioctl 40046207 0 returned -16 13:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000000c0)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) r3 = dup(r0) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x6, 0x14, 0x93, {}, {r5, r6/1000+30000}, {0x0, 0xd2a, 0x101, 0x7fffffff}, 0x1, @canfd={{0x4, 0x6, 0x5, 0x7fffffff}, 0x2d, 0x0, 0x0, 0x0, "304560fd8cd4e540b717450d38851ec13509f3430448b4660c57f5f3dba4b977002c260fd051279650209fbd8aa5d6ebe3c7690175a125effad9a82dbf287a1c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) [ 2635.945103] binder_transaction: 9 callbacks suppressed [ 2635.945123] binder: 32214:32216 transaction failed 29201/-71, size 0-0 line 2741 13:44:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7a00}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc0189436, 0x0) 13:44:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x0, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2635.996088] binder: 32228:32229 ioctl 400454da 20000100 returned -22 [ 2636.023517] binder_release_work: 9 callbacks suppressed [ 2636.023525] binder: undelivered TRANSACTION_ERROR: 29201 [ 2636.040150] binder: 32228:32229 ioctl 8912 400200 returned -22 [ 2636.081030] binder: BINDER_SET_CONTEXT_MGR already set [ 2636.091959] binder: 32232:32233 got reply transaction with no transaction stack [ 2636.114931] binder: 32228:32240 ioctl 400454da 20000100 returned -22 [ 2636.122228] binder: 32232:32233 transaction failed 29201/-71, size 0-0 line 2741 13:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000300)={0x1, 0x1, 0x100, 0x1, {0x5, 0x6, 0x2, 0x6}}) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = dup2(r0, r1) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000340)={0x46}, &(0x7f0000000380), &(0x7f0000000400)={r3, r4+10000000}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) prctl$PR_SET_FPEMU(0xa, 0x1) timer_create(0x6, &(0x7f0000000600)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000440)="412814322dd3c1a1cc71807e47b54f574a2d7ae1d5f53a2f9fe4955dde024149730c5edd54f6b4dd348b792f62d9a7e5efd72970d08807c73f119fae36e059098730e783c80b81906da7813f82cfb0f1595454b3e3be9c1cbc760d7ffddf40750d54c0475c8f2dbf4019ceb29c801081481a285981e7c5602588b12abdada2df7680c260cf88540bacb5d064ec7edc46654ff7f4c80770528d55af94837ee05633fd93f531b0552d3eb8f5ca1bbe6fb81755883ce383b0a61fd8ea92cd5ac98394ad9090c02887da2a496edcb946c8d84efe7d8cf1bec7", &(0x7f0000000540)="5f258208b61ee8c183add36633573ac8d091fa5edaecd032a2b08073f061e7bf3c81c354a8ef76180bab2621eeeb372eba284a75df13d33f6568f73d612f547482ac0807260102c0b4922dccdc28a84a8faf9a1f22f778f208b767dc70d82cf3bf575e23e71ddb7a77bb6f49bed2e31cfa3f875244d1aa12510355650b7b468f8fb687daf676e900ec53aabfb1035a88cc7b"}}, &(0x7f0000000640)) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000680)={0x3, 0x5, 0x1f, 0x8}) r6 = semget$private(0x0, 0x5, 0x52) semctl$IPC_RMID(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="6746b0933e367464c36594d961a99e9281568c753416516ff1bbddb073a70bb7ef04cd77ca5c5e8107ff2366823a3df54354ad7e579187942a6534ac7f8a99a68f5af00572ca89be0d638aa8e0534295ae257497dc76b4c1ba82ef74e2e4a8007f7997f1e6e92900a21f2a43ac37e98360ef4ac6257810c5a45a890a858b2297d99cd265217e6b42c82f09dcc7659b6651ef981e7f5a316f368951169d9a4ee74f4dfaae8b9fc2dfb812f0fc91db5eb2f5b8840d6a7b3a0f195e", &(0x7f00000001c0)="0dc26f28d84ef086300b3106dad5244b697d4965e81b25321461318e800c09a0d998a236f39d934e0294b8c8c0427f71b32f07d1a3f35973ec4f4218a36d52963957d457927b305e44e7cfcdfcc9c9c63e8426dd70199485f3ceac65fc4f74bd53f2e2ca6b686c7ad75739d047fbfe3c53c5108e6db3a8112c8abf70b2ab7586174bf6e7ed78abaa193c4120b52e7ffc5989877a234fbe33de2ec10e75f68aa091fe7835ca1bdde9a0d91b6378a08b211bd19cfff9b522e834485727c6f8a797fff7dbf2663ecc56", 0x2}, 0x20) write$smack_current(r1, &(0x7f0000000140)='/dev/binder#\x00', 0xd) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0), 0x10) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2636.130365] binder: 32228:32229 ioctl 40046207 0 returned -16 [ 2636.140755] binder: 32228:32234 ioctl 8912 400200 returned -22 13:44:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7a}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2636.202194] binder: undelivered TRANSACTION_ERROR: 29201 [ 2636.211279] binder: 32246:32247 ioctl c040563e 20000300 returned -22 [ 2636.221279] binder: 32246:32247 ioctl 700f 0 returned -22 [ 2636.243555] binder: BINDER_SET_CONTEXT_MGR already set [ 2636.258015] binder: 32250:32251 ioctl 40046207 0 returned -16 [ 2636.265841] binder: 32250:32251 got reply transaction with no transaction stack [ 2636.274330] binder: 32250:32251 transaction failed 29201/-71, size 0-0 line 2741 [ 2636.288010] binder: 32246:32253 ioctl 401870cb 20000680 returned -22 [ 2636.297319] binder: 32246:32253 ioctl 8912 5 returned -22 [ 2636.314399] binder: undelivered TRANSACTION_ERROR: 29201 13:44:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4090ae82, 0x0) 13:44:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x100000000005, 0x84) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x40000000000000, @multicast1}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffc1, 0x8) 13:44:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xa00000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2636.567878] binder: BINDER_SET_CONTEXT_MGR already set [ 2636.597800] binder: 32257:32258 ioctl 40046207 0 returned -16 13:44:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r3 = accept(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2636.621593] binder: 32257:32258 got reply transaction with no transaction stack [ 2636.647919] binder: 32257:32258 transaction failed 29201/-71, size 0-0 line 2741 13:44:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xae80, 0x0) 13:44:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x600}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2636.704779] binder: undelivered TRANSACTION_ERROR: 29201 13:44:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x5450, 0x0) [ 2636.759531] binder: BINDER_SET_CONTEXT_MGR already set [ 2636.765043] binder: 32280:32282 ioctl 40046207 0 returned -16 [ 2636.773082] binder: 32280:32282 got reply transaction with no transaction stack [ 2636.783568] binder: 32280:32282 transaction failed 29201/-71, size 0-0 line 2741 13:44:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x700}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2636.820877] binder: undelivered TRANSACTION_ERROR: 29201 [ 2636.873169] binder: BINDER_SET_CONTEXT_MGR already set [ 2636.879612] binder: 32288:32289 ioctl 40046207 0 returned -16 [ 2636.895988] binder: 32288:32289 got reply transaction with no transaction stack [ 2636.904103] binder: 32288:32289 transaction failed 29201/-71, size 0-0 line 2741 [ 2636.929951] binder: undelivered TRANSACTION_ERROR: 29201 13:44:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 13:44:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x41a0ae8d, 0x0) 13:44:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xfffffdfd}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2637.005720] binder: BINDER_SET_CONTEXT_MGR already set [ 2637.011186] binder: 32246:32253 ioctl 40046207 0 returned -16 [ 2637.011783] binder: 32246:32291 ioctl c040563e 20000300 returned -22 [ 2637.017160] binder: 32246:32292 ioctl 700f 0 returned -22 [ 2637.019064] binder: 32246:32253 ioctl 401870cb 20000680 returned -22 [ 2637.029351] binder: 32246:32294 ioctl 8912 5 returned -22 [ 2637.071757] binder_thread_write: 20 callbacks suppressed [ 2637.071771] binder: 32297:32298 IncRefs 0 refcount change on invalid ref -515 ret -22 [ 2637.093598] binder: BINDER_SET_CONTEXT_MGR already set [ 2637.095721] binder: 32297:32298 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2637.103159] binder: 32300:32301 ioctl 40046207 0 returned -16 [ 2637.112802] binder: 32297:32298 got reply transaction with no transaction stack 13:44:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x100000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2637.112820] binder: 32297:32298 transaction failed 29201/-71, size 0-0 line 2741 [ 2637.139567] binder: undelivered TRANSACTION_ERROR: 29201 [ 2637.140388] binder: 32300:32301 ioctl ab03 0 returned -22 [ 2637.201354] binder: 32304:32305 got reply transaction with no transaction stack [ 2637.210796] binder: 32304:32305 transaction failed 29201/-71, size 0-0 line 2741 [ 2637.233626] binder: undelivered TRANSACTION_ERROR: 29201 13:44:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc018ae85, 0x0) 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x200200, 0x0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x96fc}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xffffff7f00000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x208009f, 0x200) ioctl(r1, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x0, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x3, r3}) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) 13:44:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x5452, 0x0) 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) dup3(r3, r0, 0x80000) 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) pread64(r3, &(0x7f0000000000)=""/116, 0x74, 0x0) [ 2637.599088] binder: BINDER_SET_CONTEXT_MGR already set [ 2637.609775] binder: 32326:32331 ioctl 40046207 0 returned -16 [ 2637.638983] binder: 32326:32331 got reply transaction with no transaction stack 13:44:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x4, @local, 0x5}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0xc90}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x80, @loopback, 0x6283}, @in6={0xa, 0x4e21, 0x1ff, @mcast2, 0x2}], 0x90) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xfff) sendto$inet(r3, &(0x7f0000000200)="df8d7fa4b2052d225eeaae70ee294dc41a03da4c711ee6a40a4b8510478d464c09311421c72536a04ef50324ea4dea91c35c6850c9f615f9b3393e08d378a1d0b49b06fdbba5800b93d1e25083ac088c56455db4cf337120765ca902d33c475994c1ee43f319328fda0e86cfb9be08bf43c2674afdd0cc2fc396020fb5843c0c12f30046ccf94514aa1f4528990de5bdc57c60bdc8d4be793cb2778d7f22d0d49784163e9dd0e52c5e1ed957484d53421d3e20717ddcd45570d3c2d2fc60feed", 0xc0, 0x4000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:44:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)=',\x00', 0xfffffffffffffffc) keyctl$update(0x2, r1, &(0x7f0000000100)="40048b3a6cc158393ffebf94c646dec30f2cb5dac91c76cfde02b1235f87fe0ddf11e7ee8b803c9bea15c41fd67727743eb0901b752859a71cf1af9711c4dbcc6bd1c21f8ccf9a6d7ca05c348e8777706216578d3a60a24c14a57724", 0x5c) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2637.664645] binder: 32326:32331 transaction failed 29201/-71, size 0-0 line 2741 [ 2637.692391] binder: 32338:32339 ioctl 4004556a 5 returned -22 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x0, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) [ 2637.769003] binder: undelivered TRANSACTION_ERROR: 29201 [ 2637.822232] binder: 32348:32350 ioctl 1267 200000c0 returned -22 13:44:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x60000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="78a2baebf150c20b41b1224dcd8dcd9968d9e377ccb22941916e21b0064242952df1ce11359647123eaa70130f7f5137941b75135d22a92485b422ee45c94164bdf074b536a3891a21d69f03f5b36abafdbaea8b8643f053608bdb34216a365d32d878dd5464ac495f4cccd1ab8c7ec661742f5694b4bb9ef31b6a90b661b1de7c5face4977b03f8f9bf844971fb6ebe00b985e8d8ed79ed0d8ff03bd05d9b38f2db26c3812d7ab3285001a26b56712310aca24ac63c6b87597c9576f6bd769b6dc9bcba915acc3aabbc4340c2a377dfd4d8cddb4faf", 0xfffffd0b}, {&(0x7f0000000100)="ab2f66fdc55f283cbc38455a4c6f7217de92d8330158f6108d240e979b769f80ca9fcea384b56ba64077f8e8fafc953378aa11df508eaf45c1618cce0d4b029393f5f4f7e0dfd1efcde55ebd5b42dfc86c65989a072e9540ec", 0x59}, {&(0x7f00000001c0)="be63c2a81fc91068708f61a373ee28d803149271a39a61b8ab715b17e1a2b3d793ae59e4641dfde90b53381ce319f532885290c51f38c92303b4688e27529817e8a57779fd4ef7629bc40a0fb6923830069defb0601818a9c29cba8ed16fc7bd87df2cf61c3eb7f1cb29a0", 0x6b}, {&(0x7f0000000240)="1308c76186edfb4b0b7a38c66d3f7da236bf3509499fa3c8908c3c8635fe39029e109b14c981311ca19f98555296ac4260d4f78631f67299901ff0e309dce28672e661031684bc2d8e85a9c67c8748a2d360e8f3b7bd9b6026c6aa3e9e65021999a98df9945b0bf02aa28d720b37ffea1288a1e3643084c3367d13fe448f34d9e19f021c8151e7be7beeb7255da806d4bc4b836a", 0x94}, {&(0x7f0000000300)="9da63dfeeaefdd26dbf3b85ba50e3f804a5bbd1caff368c430f66517d8695565a77078ad81eafed1cd94049a9ef00b07b2ea8ab7a5bc12005ae5a75bc9e3ffe6d03f0b6599e2595c38882f5efbe421e9105e76b4d2592584c9ef5bd92b23a3d24f5de1ea265aaa0386a56b46a201039620346a5c85265b3f0a1a57f91bc111c8306c76b096f846b75af79a6c7f68966c74741c0a02e8aa2d909653cc3908e5", 0x9f}], 0x5) 13:44:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2638.276373] binder: BINDER_SET_CONTEXT_MGR already set [ 2638.293885] binder: 32358:32360 ioctl 40046207 0 returned -16 [ 2638.307713] binder: 32358:32360 IncRefs 0 refcount change on invalid ref 1610612736 ret -22 [ 2638.316443] binder: 32358:32360 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2638.325364] binder: 32358:32360 got reply transaction with no transaction stack [ 2638.333178] binder: 32358:32360 transaction failed 29201/-71, size 0-0 line 2741 [ 2638.353937] binder: undelivered TRANSACTION_ERROR: 29201 13:44:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x3) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xff, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0xc00000, 0x200, 0x8b0f, 0x5, r5}, 0x10) 13:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r4, 0x2, 0x30}, &(0x7f00000000c0)=0xc) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x74000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x7f}}, 0xff, 0x1}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x3ff, 0x1}, 0xc) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2638.454692] binder: BINDER_SET_CONTEXT_MGR already set [ 2638.467767] binder: 32373:32374 ioctl 40046207 0 returned -16 [ 2638.475777] binder: 32373:32374 IncRefs 0 refcount change on invalid ref 1946157056 ret -22 [ 2638.484773] binder: 32373:32374 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x5000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1c4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x7, @link_local}, 0x18, {0x2, 0x4e24, @multicast2}, 'ifb0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000000009) r4 = accept(r0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) 13:44:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@generic={0x2, 0x7, 0x1ff, 0x763, 0x29}, @jmp={0x5, 0x8, 0x9, 0xe, 0xb, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x3, 0xf, 0x1, 0xffffffffffffffff, 0x18}, @ldst={0x1, 0x2, 0x3, 0x3, 0x1, 0xfffffffffffffff8, 0x10}, @generic={0x100, 0x0, 0xfffffffffffffffb, 0x9, 0xd43}, @jmp={0x5, 0x2, 0x1, 0x2, 0x7, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x11, &(0x7f0000000140)=""/17, 0x0, 0x1, [], 0x0, 0xf}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x6, 0x0, 0x70}}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2638.595430] binder: BINDER_SET_CONTEXT_MGR already set [ 2638.608171] binder: 32385:32386 ioctl 40046207 0 returned -16 [ 2638.621467] binder: 32385:32386 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 2638.657993] binder: 32385:32386 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000340)="0a5c2d0240316285717070b424") unshare(0x400) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xff, 0x4000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r4, 0x0, 0x3, &(0x7f00000001c0)="a15b00", r5}, 0x30) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f00000000c0)="7cb4a6dbf3fb6c2b8d45e441c3e01b5cf7dfb124c0205f74bcb4d4e3b61abc754cc50d37d42e5d893c038fd4111cd55df4a5711cdcb3"}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4004ae8b, 0x0) 13:44:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2638.790815] binder: 32401:32402 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 2638.799021] binder: 32401:32402 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c6300000c63000003630840", @ANYRES64=r1, @ANYBLOB="0b630000c02214b7e0b488b3197b735a24817749347e624a7872f313dad546b2000000000000000000000000"], 0xd9, 0x0, &(0x7f0000000080)="cefc2da4469320a304eafa79ce061676cd14ada1f3706c9cc73d34080852463d3c4db65e3819a086662094093fbe95a20a75343da3a989e0e14a9253702b18241f985071e040e3f865e563d70fe114119e3c66c09df0bbe969fd036c959f0b05a3210b4e61bc05e79c2e32add6b52e04645775d327c1e63c0cf17f7236b28e2136fae4cc590a253bbfd14fca08036ecc884ca65d7beade95842d91227f3d6cbf8c17548d73f486d301ba03e376bdfeceb6a3cff68b9483e2335a0fd36408cb66abbcb4ac17fc72b41c58043f7be5335afd979cdeff88c45630"}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x3, 0x8000}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x7e, "f97e3afd0b12b9cbd9c1026eaeacb58a3d450e09e2baf8d70aab8d180b1fc0e57aa7a2655adb996d8d89c7b2899db9090d7281582080d0db2504e27643da8be23a3a96682cc29ac8145fbcb85be557bbf9b60829c7769403bd087dbc629d0a5cdc8a436e72cccc4283f8053c5ef623ccaad5d990f27e38d872bba733466c"}, &(0x7f00000002c0)=0x86) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000340)={0xa87, 0x2, 0x36}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x3, 0x800, 0xa, 0x200, 0x101, 0x3, 0x9, 0x3, r3}, 0x20) r4 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) 13:44:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x686c0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4004ae8b, 0x0) [ 2639.306183] binder: BINDER_SET_CONTEXT_MGR already set [ 2639.324905] binder: 32419:32420 ioctl 40046207 0 returned -16 [ 2639.344456] binder: 32419:32420 BC_FREE_BUFFER u0000000000000000 no match 13:44:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x48000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 13:44:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6000000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2639.359436] binder: 32419:32420 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2639.378079] binder: 32419:32420 unknown command -1223417152 [ 2639.393540] binder: 32419:32420 ioctl c0306201 200001c0 returned -22 [ 2639.406497] binder: 32419:32427 ioctl 4008af12 20000040 returned -22 [ 2639.428274] binder: 32419:32420 ioctl 5414 20000340 returned -22 13:44:11 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x600000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x38f}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x400000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e22, 0x1, 'rr\x00', 0x10, 0x0, 0xd}, {@multicast2, 0x4e21, 0x2, 0xdaa, 0x4, 0x80}}, 0x44) r2 = dup2(r0, r1) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:44:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400000000c204003) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2639.540109] binder: BINDER_SET_CONTEXT_MGR already set [ 2639.559665] binder: 32441:32442 ioctl 40046207 0 returned -16 [ 2639.582640] binder: BINDER_SET_CONTEXT_MGR already set 13:44:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2639.588871] binder: 32441:32442 ioctl 40046207 0 returned -16 13:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}}}, &(0x7f0000000100)=0xe8) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x4, 0x800}, {0x0, 0x2}], r2}, 0x18, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = dup(r0) r4 = dup2(r0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) 13:44:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7400}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000020000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) getresgid(&(0x7f00000000c0), &(0x7f0000000480)=0x0, &(0x7f0000000500)) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uinput\x00', 0x589eaf8116ff4f7f, 0x0) setregid(r3, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) close(r5) close(r2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4004ae8b, 0x0) 13:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2640.171283] binder: BINDER_SET_CONTEXT_MGR already set [ 2640.185475] binder: 32467:32469 ioctl 40046207 0 returned -16 13:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x80}}, 0x18) r2 = dup(r0) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80800) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 2640.258769] binder: 32476:32477 ioctl 6611 0 returned -22 13:44:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x185281) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r3, 0xfff, 0x1f}, 0x8) r4 = accept(r2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4800}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x7, 0x5, 0x0, 0x0, 'syz1\x00', 0x2}, 0x4, 0x44, 0x6, r4, 0x9, 0x1, 'syz0\x00', &(0x7f0000000040)=['/dev/binder#\x00', '+ppp1selinux^\x00', '/dev/binder#\x00', '/dev/binder#\x00', '}eth1&{\x00', '{\x00', 'system\x00', '!&mime_type{\x00', '/dev/binder#\x00'], 0x60, [], [0x6c, 0x7, 0x3, 0x3ff]}) [ 2640.424913] binder: 32483:32486 ioctl 540f 20000000 returned -22 [ 2640.434722] binder: BINDER_SET_CONTEXT_MGR already set [ 2640.442714] binder: 32483:32486 ioctl c1105518 200001c0 returned -22 13:44:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xa1, 0x400) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2640.472878] binder: 32484:32485 ioctl 40046207 0 returned -16 13:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000000)={0x20001, 0x0, [0x0, 0xfffffffffffffff9, 0x6, 0x10001, 0x32, 0x800, 0x8, 0x3e9]}) 13:44:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80000003, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x2}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x90000, 0xe292a581dfa2ceef) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x8000, 0x1, 0x20, 0x1, 0x1, 0x0, 0x6}) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000140)={r5, 0x1}) 13:44:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2641.036161] binder_transaction: 9 callbacks suppressed [ 2641.036172] binder: 32511:32512 got reply transaction with no transaction stack [ 2641.053992] binder_transaction: 9 callbacks suppressed [ 2641.054010] binder: 32511:32512 transaction failed 29201/-71, size 0-0 line 2741 [ 2641.069316] binder: BINDER_SET_CONTEXT_MGR already set 13:44:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6800000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) getrlimit(0xd, &(0x7f0000000200)) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000001c0)={0x0, 0xfed, 0x2}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'posix_acl_accessbdev,wlan1@/^em1em0mime_type\\&'}, {0x20, '@eth1*'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, 'securitysecurity'}, {0x20, '/)vmnet1'}, {}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, ')trusted{'}], 0xa, "77b47e4aeffd4d23c66c89e136d7e20a0aa117e97ce355fd546faf2debb749ae58af5898a0c620efd57447ae236ebcd93c398e02274af073c2301f373a952bbf330b333f28b2127e44b33bb83acb46ad9f7dc9a570479b8acf241aab49d9d940b270ca2467e7be686994d4f105f9d29ac6e7f429d43d740e72605b5822bf1ddf3170c430aeb1091dd2549095cee7f2bf1a28c6c642dda256e5e32cbfe28647a677d97b6dd36d7d8d51cfc7ec27086c2a26834ecceb50878ccc70dd28ab5f9705f8b61520d50b4b173d3c4ee33de375b6adc534bd9f0b8ca0917cb7"}, 0x179) [ 2641.089102] binder: 32513:32518 ioctl 40046207 0 returned -16 [ 2641.115901] binder_release_work: 9 callbacks suppressed [ 2641.115908] binder: undelivered TRANSACTION_ERROR: 29201 13:44:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) clock_nanosleep(0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x521100, 0x0) mq_timedsend(r4, &(0x7f0000000500)="a985d8b885e74a37e89852ccd30787a5e911b0306065eaf411abb28ea39741bb72c2418ae7fe432cc525f32b18a7f79f656e69686a6b29662c951e8a0a3643cc228b564cf70a4fc0ab67e4886b371dae16c8ecabf0c845ad886fc18217f5007418485dbd30105c99fcd39ca47fe59dd70923b0825b9616b0bdeebe0bc48b0f001e395517435a3a3efe589c658f9c80d155cdecbd39679f48a44e22869dabe600fe4ebd36af4174dbfc487c64", 0xac, 0x3, &(0x7f0000000200)={0x77359400}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0xc040, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x8, 0x0, 0x7, 0x2, 0x7, 0xffff, 0xb9, {0x0, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x101}}, 0x2, 0x0, 0x401, 0x5}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000680)={0x3, 0x49, 0x1, 0xab30, 0x100000001, 0x100000001, 0x40000000, 0x0, r8}, 0x20) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x4e21, 0x4, 0x4e22, 0x7, 0x0, 0x80, 0xa0, 0x8f, r6, r7}, {0x3, 0xffffffff, 0xa1da, 0x20, 0x9, 0x1, 0x7ff, 0x7}, {0x4bc2e246, 0xadc, 0x0, 0x4}, 0xffffffff, 0x6e6bb6, 0x2, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x3505, 0x0, 0x1, 0x1, 0x2, 0x9, 0x81}}, 0xe8) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 2641.174123] binder: 32527:32528 got reply transaction with no transaction stack [ 2641.188351] binder: BINDER_SET_CONTEXT_MGR already set [ 2641.196612] binder: 32527:32528 transaction failed 29201/-71, size 0-0 line 2741 [ 2641.203122] binder: 32530:32533 ioctl 40046207 0 returned -16 13:44:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x3f00000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x4) [ 2641.232702] binder: 32530:32537 ioctl 4018ae51 200001c0 returned -22 [ 2641.247689] binder: undelivered TRANSACTION_ERROR: 29201 13:44:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x101800) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0xfffffffffffffffe, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0xc0000007, 0x100, 0x0, 0x8, 0x20, 0x200, 0x4}, {0x40000001, 0x6, 0x2, 0x7fd, 0xfffffffffffffff7, 0x100000001, 0x3ff}, {0x0, 0x6, 0x3, 0x794, 0x0, 0x2, 0x10000}]}) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2641.323006] binder: 32541:32543 got reply transaction with no transaction stack [ 2641.331176] binder: 32541:32543 transaction failed 29201/-71, size 0-0 line 2741 [ 2641.336263] binder: BINDER_SET_CONTEXT_MGR already set [ 2641.353231] binder: 32544:32545 ioctl 40046207 0 returned -16 [ 2641.386974] binder: undelivered TRANSACTION_ERROR: 29201 13:44:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r3, r3) r5 = msgget(0xffffffffffffffff, 0x2a0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0x0, {0xb, 0x3}, 0x3, 0x0, r6, 0x4e, 0x20, 0x0, 0x6, 0xffffffffffffff96, 0x3, 0x0, 0x101, 0x3, 0x0, 0x7, 0x6, 0xba0, 0x7a2, 0x401}}, 0xa0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000440)={0x6f, 0x3, 0x0, 0x800, 0x8, 0x4, 0x4}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000340)=""/35) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffb449bb81010400000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r3, &(0x7f0000000880)="390b9416a747e291a9930d67c78da5e6a3f50de634aee22a54f2528d1ff5745561b1efa3f27c109288e9c0c8081c599d3a9828509b4d0b95464a3a6ccb925f9f19089509a03fdb68463a0d20956f5b6e47afe5d212ed85087d134c1160c19f64186f05b7c9", 0x65, 0x58e694fedecf502c, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty, [0x0, 0x3e8, 0xf4010000]}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) getpeername(r0, &(0x7f0000000840)=@can, &(0x7f00000008c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@multicast2, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001b40)=0xe8) 13:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x71bd, 0x31}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 13:44:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4c000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x8c0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0x2}, &(0x7f00000000c0)=0x18) ioctl$KDADDIO(r1, 0x4b34, 0x8001) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x5, 0x1, 0x7, 0x0, 0x1e, 0x477299e3, 0x101, r2}, &(0x7f0000000140)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000180)={0x80000000, 0x5, 0x303f}) 13:44:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2641.941020] binder: 32556:32560 ioctl 401870c8 20000040 returned -22 [ 2641.948594] binder: BINDER_SET_CONTEXT_MGR already set [ 2641.981052] binder: 32559:32561 ioctl 40046207 0 returned -16 13:44:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x100000000009) r1 = accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x198, r2, 0x110, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbe746dd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80b7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xe4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb6}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x200000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x6, 0x103, 0x1, {0x7fff, 0x1, 0x4, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) [ 2642.018449] binder: 32559:32561 got reply transaction with no transaction stack [ 2642.058490] binder: 32559:32561 transaction failed 29201/-71, size 0-0 line 2741 13:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x480, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000440)={0x4, 0x103, 0x6, {0x81, 0x100000001, 0xffffffffffffff98, 0x5}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r0) r3 = dup2(r2, r0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bcsf0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="2e010000af3ccf70ac3220fc00010000cca1374bd38f602f90d579bc28a53f131a502a3a5d3d9cf7d23a5b9313e29cb8369c"], &(0x7f0000000340)=0x36) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="000226bd7000fcdbff250100000008000100", @ANYRES32=r5, @ANYBLOB="8c0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="4c00e7ff2300010062070000006173685f66756e6300000000000000000000e9ff678c50ffffffffff00080003000b0000040008000805070000000100011f050000000300069cff000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="d71c753bfb448128ebab", @ANYRES16=r6], &(0x7f0000000100)=0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000280)={'ip6gretap0\x00', {0x2, 0x4e24, @loopback}}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) set_tid_address(&(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000380)={{0x1}, {0x8, 0x9}, 0x9, 0x0, 0x719f}) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6c000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x2000000000005, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000007) r3 = accept(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2642.140562] binder: undelivered TRANSACTION_ERROR: 29201 [ 2642.197095] QAT: Invalid ioctl [ 2642.202853] binder: BINDER_SET_CONTEXT_MGR already set [ 2642.208811] binder_thread_write: 12 callbacks suppressed [ 2642.208826] binder: 32587:32588 IncRefs 0 refcount change on invalid ref 1811939328 ret -22 [ 2642.223791] binder: 32585:32586 ioctl 40046207 0 returned -16 [ 2642.231586] binder: 32587:32588 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2642.241619] binder: 32585:32586 ioctl 8933 200002c0 returned -22 [ 2642.248835] binder: 32587:32588 got reply transaction with no transaction stack [ 2642.258036] binder: 32585:32586 ioctl 8919 20000280 returned -22 [ 2642.264468] binder: 32587:32588 transaction failed 29201/-71, size 0-0 line 2741 [ 2642.277183] binder: 32585:32586 ioctl 40505331 20000380 returned -22 13:44:13 executing program 3: r0 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x6, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="4a5f902bcfe70276a1b53c48c65802e41fbc1f2e8debda0f7ccbb123d20afd3e0d5a1fb9c67b3e9ec1f0738c6bebdab580a48b14919d5942f351579da4d557e73ef8fb71e0230de3a12f21fb12fed104379cddc4becde42e4b27aada3569839fc4bd189457642f458715c1593df818157f08824dc922f624d415d3d48e8817df4e4d0d8f507bdfc0e7f36a5dcbbe50512c06086bbb288c9efeefd86efd40", 0x9e) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000080)=""/208) r3 = dup(r1) r4 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6, 0x705042) r5 = dup2(r3, r4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) 13:44:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6c00}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x8000, 0x5, 0x7, 0x4, [], [], [], 0x0, 0x7f, 0x3b, 0x7, "89cfa31c171ce32d7c889d96c2358e19"}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = socket(0x15, 0x800, 0x5) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) [ 2642.312405] binder: undelivered TRANSACTION_ERROR: 29201 [ 2642.355268] binder: 32595:32596 ioctl 80404508 20000080 returned -22 [ 2642.370699] binder: BINDER_SET_CONTEXT_MGR already set [ 2642.377166] binder: 32595:32599 ioctl 80404508 20000080 returned -22 [ 2642.387662] binder: 32595:32596 ioctl 40046207 0 returned -16 [ 2642.388151] binder: BINDER_SET_CONTEXT_MGR already set 13:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2642.416789] binder: 32597:32600 ioctl 40046207 0 returned -16 [ 2642.444606] binder: BINDER_SET_CONTEXT_MGR already set [ 2642.450288] binder: 32607:32608 ioctl 40046207 0 returned -16 [ 2642.459685] binder: 32597:32600 IncRefs 0 refcount change on invalid ref 27648 ret -22 [ 2642.489296] binder: 32597:32600 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2642.500036] binder: 32597:32600 got reply transaction with no transaction stack [ 2642.523006] binder: 32597:32600 transaction failed 29201/-71, size 0-0 line 2741 [ 2642.562118] binder: undelivered TRANSACTION_ERROR: 29201 13:44:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xa}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2642.882368] binder: 32618:32620 IncRefs 0 refcount change on invalid ref 10 ret -22 [ 2642.890529] binder: BINDER_SET_CONTEXT_MGR already set [ 2642.908157] binder: 32621:32622 ioctl 40046207 0 returned -16 [ 2642.919466] binder: 32618:32620 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) read$eventfd(r4, &(0x7f0000000040), 0x8) 13:44:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2642.939157] binder: 32618:32620 got reply transaction with no transaction stack [ 2642.954729] binder: 32618:32620 transaction failed 29201/-71, size 0-0 line 2741 13:44:14 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xf16, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000080)=""/25, &(0x7f00000000c0)=0x19) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ffc) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xff) r4 = accept(r1, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) sendto$inet6(r1, &(0x7f0000000200)="67260889c39d5a433d4bfd2a78bf6e002b4106", 0x13, 0x40000, &(0x7f0000000240)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c) 13:44:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x6000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2643.014086] binder: undelivered TRANSACTION_ERROR: 29201 [ 2643.041372] binder: 32637:32639 ioctl 227f 20000000 returned -22 13:44:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x78) r2 = dup(r0) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x11a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) ioctl(r5, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000280)={0x2, 0xff, 0x9, 0x0, 0x5}) getsockname$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x7}) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) [ 2643.104721] binder: BINDER_SET_CONTEXT_MGR already set [ 2643.120271] binder: 32641:32643 ioctl 40046207 0 returned -16 [ 2643.158308] binder: 32641:32643 IncRefs 0 refcount change on invalid ref 100663296 ret -22 [ 2643.174226] binder: 32647:32649 ioctl 40044590 200000c0 returned -22 [ 2643.187797] binder: 32641:32643 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2643.202776] binder: 32647:32649 ioctl 40505412 20000280 returned -22 [ 2643.205317] binder: 32641:32643 got reply transaction with no transaction stack [ 2643.218368] binder: 32641:32643 transaction failed 29201/-71, size 0-0 line 2741 [ 2643.218770] binder: 32647:32649 ioctl c0305710 20000000 returned -22 13:44:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = msgget(0x3, 0x98) msgrcv(r3, &(0x7f0000000000)={0x0, ""/120}, 0x80, 0x1, 0x3000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2643.249498] binder: BINDER_SET_CONTEXT_MGR already set [ 2643.254116] binder: 32647:32657 ioctl 40044590 200000c0 returned -22 [ 2643.264209] binder: 32647:32649 ioctl 40046207 0 returned -16 [ 2643.279102] binder: undelivered TRANSACTION_ERROR: 29201 [ 2643.291431] binder: 32647:32656 ioctl 40505412 20000280 returned -22 13:44:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x3f00}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000340)={0x0, "f360ce79b7bacc9ff72830d478684be0b5564615f7eabd4fc970dfd74ee0d09f", 0x3, 0x3, 0x3ff, 0x8000, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x82000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in=@remote, 0x4e22, 0x2, 0x4e20, 0x7, 0x2, 0x80, 0x20, 0x99, r5, r6}, {0x1ff, 0x7fff, 0x3ff, 0x2, 0x401, 0x6, 0x8, 0x4}, {0x3, 0x2, 0xd95e, 0x4}, 0x4, 0x0, 0x1, 0x1, 0x0, 0x262ad11598af52e7}, {{@in=@broadcast, 0x4d6, 0x2b}, 0x2, @in6=@local, 0x3507, 0x2, 0x3, 0x9, 0x1, 0x4, 0xa902}}, 0xe8) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r2, r3) r4 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) [ 2643.760397] binder: BINDER_SET_CONTEXT_MGR already set [ 2643.778282] binder: 32668:32672 ioctl 40046207 0 returned -16 [ 2643.796288] binder: 32668:32672 IncRefs 0 refcount change on invalid ref 16128 ret -22 [ 2643.805310] binder: 32668:32672 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2643.813859] binder: 32668:32672 got reply transaction with no transaction stack [ 2643.822027] binder: 32668:32672 transaction failed 29201/-71, size 0-0 line 2741 [ 2643.846098] binder: 32677:32678 ioctl 8905 20000100 returned -22 13:44:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x2000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000000)={{0x0, @name="e9d912ddacf5ed3ed34ceb6e05e2fd7b9d18af777b9778cfa1da7677f60955b3"}, "d3112c7267a3fa910acfa7c573b46ffc15afe7dd08b168daade43e988da12aac", 0x3}) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2643.858072] binder: undelivered TRANSACTION_ERROR: 29201 [ 2643.899755] binder: 32681:32683 got reply transaction with no transaction stack [ 2643.907242] binder: 32681:32683 transaction failed 29201/-71, size 0-0 line 2741 [ 2643.921117] binder: BINDER_SET_CONTEXT_MGR already set [ 2643.926819] binder: 32682:32684 ioctl 40046207 0 returned -16 [ 2643.935338] binder: undelivered TRANSACTION_ERROR: 29201 [ 2643.941029] binder: 32682:32684 ioctl c0c85666 20000000 returned -22 13:44:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x4c}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:15 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x20}, 0x9}, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}], 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', r2}) r3 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x2000000000000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2644.011894] binder: BINDER_SET_CONTEXT_MGR already set [ 2644.021655] binder: 32688:32689 ioctl 40046207 0 returned -16 [ 2644.039437] binder: 32688:32689 ioctl 8933 200000c0 returned -22 [ 2644.055059] binder: 32688:32689 ioctl 8933 20000100 returned -22 [ 2644.062839] binder: 32688:32689 ioctl 8912 2 returned -22 [ 2644.070629] binder: BINDER_SET_CONTEXT_MGR already set [ 2644.077138] binder: 32688:32689 ioctl 40046207 0 returned -16 [ 2644.077401] binder: 32688:32699 ioctl 8933 200000c0 returned -22 [ 2644.096447] binder: 32688:32689 ioctl 8933 20000100 returned -22 [ 2644.104351] binder: 32688:32697 ioctl 8912 2 returned -22 13:44:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0xa000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/244) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2f6) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 2644.198551] binder: BINDER_SET_CONTEXT_MGR already set [ 2644.208639] binder: 32705:32706 ioctl 40046207 0 returned -16 13:44:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x48000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xddc, 0xc0002) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r4}, 0x10) 13:44:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2644.625707] binder: BINDER_SET_CONTEXT_MGR already set 13:44:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x7a000000}, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2644.651805] binder: 32723:32724 ioctl 40046207 0 returned -16 13:44:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xe4, r3, 0x417, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7de}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x40) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000000009) r4 = accept(r2, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x4e20, @multicast2}}) 13:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1fc0000000000, 0x20000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/109) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x128) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x10000}) r3 = dup(r0) r4 = dup2(r0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x4, 0x5, 0x5, 0x7fff, r6}) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) 13:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000040)=0x834) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40486312, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2644.905642] binder: BINDER_SET_CONTEXT_MGR already set [ 2644.922857] binder: 32743:32744 ioctl 40046207 0 returned -16 13:44:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x4008630a, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2644.952898] binder: 32743:32744 ioctl 540f 20000000 returned -22 [ 2644.998844] binder: BC_ATTEMPT_ACQUIRE not supported [ 2645.022754] binder: 32749:32751 ioctl c0306201 20000680 returned -22 13:44:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80100, 0x0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40106309, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x3) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2645.505690] binder: BINDER_SET_CONTEXT_MGR already set [ 2645.513325] binder: 32763:32767 ioctl 40046207 0 returned -16 [ 2645.519530] binder: 32762:301 BC_ACQUIRE_DONE u4048631200000000 no match [ 2645.526431] binder: 32762:301 unknown command 0 13:44:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2645.579845] binder: 32762:301 ioctl c0306201 20000680 returned -22 13:44:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x2, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair(0x0, 0xa, 0xf3, &(0x7f0000000000)) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40086310, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8000, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xcd3, 0x0, 0x675, 0xfff, 0x0, 0x2, 0x800, 0x1, 0x1000, 0x7a, 0x0, 0x7, 0x0, 0x2, 0x4, 0x200, 0x6, 0x6, 0x1, 0x6, 0x5, 0x6, 0x4, 0x9, 0x0, 0x9, 0xfffffffffffffffa, 0x80, 0x81, 0xffffffffffffa4b0, 0x8, 0x8001, 0x107eeff7, 0x958, 0x2, 0x80000000, 0x0, 0xfb2b, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x6, 0x0, 0xb, 0x9, 0x2, 0x8}, r1, 0x10, r2, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) [ 2645.775558] binder: BINDER_SET_CONTEXT_MGR already set 13:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) [ 2645.798112] binder: 321:322 ioctl 40046207 0 returned -16 [ 2645.813119] binder: 321:322 BC_DEAD_BINDER_DONE 4048631200000000 not found [ 2645.853109] binder: 321:322 unknown command 0 13:44:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x101, @loopback, 0x7fffffff}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x8}}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x8}, @in={0x2, 0x4e24, @broadcast}], 0xa8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2645.877935] binder: 321:322 ioctl c0306201 20000680 returned -22 13:44:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046306, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000000c0)=""/23, &(0x7f0000000100)=0x17) listen(r1, 0x100000000009) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xa00000000000, 0x10000) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2646.374362] binder: tried to use weak ref as strong ref [ 2646.383857] binder: BINDER_SET_CONTEXT_MGR already set [ 2646.389584] binder: 346:358 ioctl 40046207 0 returned -16 [ 2646.395522] binder_transaction: 6 callbacks suppressed [ 2646.407319] binder: 352:353 got reply transaction with no transaction stack [ 2646.414903] binder_transaction: 6 callbacks suppressed 13:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) pread64(r0, &(0x7f0000000040)=""/210, 0xd2, 0x0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstatfs(r1, &(0x7f00000001c0)=""/4096) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x123101) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2646.414921] binder: 352:353 transaction failed 29201/-71, size 0-0 line 2741 [ 2646.443982] binder: BINDER_SET_CONTEXT_MGR already set [ 2646.449688] binder: 363:364 ioctl 40046207 0 returned -16 13:44:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40106308, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) listen(r2, 0x100080000009) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000040)={0x7, 0x1ff, 0x1, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x3) [ 2646.494361] binder_release_work: 6 callbacks suppressed [ 2646.494368] binder: undelivered TRANSACTION_ERROR: 29201 13:44:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x82081, 0x20) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') unshare(0x400) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000100)=0x81) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2252, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x3}}, 0x18) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4004ae8b, 0x0) [ 2646.550673] binder: 367:369 BC_INCREFS_DONE u4048631200000000 no match [ 2646.576955] binder: 367:369 unknown command 0 [ 2646.587170] binder: 367:369 ioctl c0306201 20000680 returned -22 13:44:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046304, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2646.614685] binder: BINDER_SET_CONTEXT_MGR already set [ 2646.633394] binder: 373:374 ioctl 40046207 0 returned -16 [ 2646.641810] binder: 373:374 ioctl 5405 20000000 returned -22 [ 2646.701848] binder: 379:380 got reply transaction with no transaction stack [ 2646.709332] binder: 379:380 transaction failed 29201/-71, size 0-0 line 2741 [ 2646.739016] binder: undelivered TRANSACTION_ERROR: 29201 13:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) fsetxattr$security_capability(r2, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0xff, 0x1}, {0xffff, 0x80}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x5c61ad8b, 0x20000000, 0xffffffffffffffff, 0x682a, 0x712, 0x3, 0xa79, 0x7, 0x100000001, 0x2}, 0x10) 13:44:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x2, 0x0, [{0xd000, 0x50, &(0x7f0000000000)=""/80}, {0x4, 0x4f, &(0x7f00000000c0)=""/79}]}) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40406301, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2647.192917] binder: BINDER_SET_CONTEXT_MGR already set 13:44:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) [ 2647.215899] binder: 385:392 got reply transaction with no transaction stack [ 2647.223577] binder: 386:393 ioctl 40046207 0 returned -16 [ 2647.232243] binder: 385:392 transaction failed 29201/-71, size 0-0 line 2741 13:44:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(r2, &(0x7f0000000040)=""/55, 0x37, 0x2000, &(0x7f0000000200)={0x11, 0x6, r3, 0x1, 0xfffffffffffffffa, 0x6, @dev={[], 0xe}}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) 13:44:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x630b, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = dup(r0) r4 = dup2(r0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x0, 0x1000, 0x7fffffff, 0x5d63}, 0x1, 0x2, 0x0, 0x0, "ff90f7e0504e8c98"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 2647.298154] binder: undelivered TRANSACTION_ERROR: 29201 [ 2647.356151] binder: BINDER_SET_CONTEXT_MGR already set 13:44:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @remote}, 0xfffffffffffffd65) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r3) [ 2647.386152] binder: 406:407 ERROR: BC_REGISTER_LOOPER called without request [ 2647.393545] binder: 408:409 ioctl 40046207 0 returned -16 [ 2647.402023] binder: 406:407 unknown command 0 13:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046312, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2647.427659] binder: 406:407 ioctl c0306201 20000680 returned -22 13:44:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) flistxattr(r0, &(0x7f0000000000)=""/111, 0x6f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13:44:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x40020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200000, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2647.509851] binder: 419:421 unknown command 1074029330 [ 2647.520775] binder: BINDER_SET_CONTEXT_MGR already set [ 2647.526966] binder: 419:421 ioctl c0306201 20000680 returned -22 [ 2647.535625] binder: 423:424 ioctl 40046207 0 returned -16 13:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$void(r0, 0x5450) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/133, 0x85) r2 = dup2(r0, r1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @mss={0x2, 0x7f}, @mss={0x2, 0x3}], 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[{0x3, 0x0, 0x6, 0x4}, {0xea2, 0x1, 0xfffffffffffffff7, 0x9}, {0x8000, 0x101, 0xffffffffffffffff, 0x4e5e}, {0x1f, 0x297d, 0x7fffffff, 0xce34}, {0xc7, 0xffffffff, 0xbfb, 0x101}, {0x5, 0x401, 0x5, 0x5}, {0x0, 0x2, 0xfff, 0x3}, {0x6, 0xee, 0x43d, 0x1}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x630c, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2647.632054] binder: 433:437 unknown command 0 [ 2647.636217] binder: BINDER_SET_CONTEXT_MGR already set [ 2647.641936] binder: 433:437 ioctl c0306201 20000680 returned -22 [ 2647.649827] binder: 436:439 ioctl 40046207 0 returned -16 13:44:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40086303, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCXONC(r1, 0x540a, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000006c0)=0x0) r6 = geteuid() stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$getown(r4, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) fstat(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980)=0x0) fstat(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$selinux_attr(r2, &(0x7f0000001340)='system_u:object_r:var_lib_t:s0\x00', 0x1f) getresgid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) r14 = syz_open_dev$audion(&(0x7f0000001200)='/dev/audio#\x00', 0x81, 0x408000) fcntl$getownex(r3, 0x10, &(0x7f00000013c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001400)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000001500)=0xe8) r17 = getegid() sendmmsg$unix(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="570ed9244d497b0876970aed853a988733f28bc0fe86481fa54ed2ba213253c81efbc197d799ffae8fd2a2be852a30590fc1a025f53c0c4930a7885bcf42b82dcf2dbc80fe58f3a26abf34eab942e33a49b6532a95d459aff3aa39b5754b448817ccea40d648410441fe44c2515d6f8562c7e596712b7b6dba1b586158fac6a2284acabfc42e77ad4b", 0x89}], 0x1, &(0x7f00000001c0)=[@rights={0x28, 0x1, 0x1, [r4, r0, r1, r4, r3, r0]}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r3, r2, r0]}], 0x50, 0x1}, {&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)="4b68a8d9db95113baccaac6eb0152a6bf83fba23e6f8d715a437acdd25e0dc5a69b5845b4156b01fa687c7c6d8f4f84050430c0cb4b26087e0d8ee25050dfc50f95751cc91ccf0f6ef08ab2d30ed704c5c0b6c1e6b283e66915c646170f189d041e4f54e61b9be3f85188f8377a05fe3cbe9535916db11e66432b5bece84bb6eb7911ce8d984970cd9d6230b23b0b3efbd0d033026dc2c845140477a82934b0dc6c7a322d6812993309b7811dc9609c49f7c17e0ee3bc579c289e540eca87ec6fcd9937df5e16020a4c833a016b8cfd6205f2ecfc4f81e970e0195595cdca0a3b2f900572c73f0238580bd", 0xeb}, {&(0x7f00000003c0)="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", 0xfe}], 0x2, &(0x7f0000000500)=[@rights={0x30, 0x1, 0x1, [r2, r2, r3, r4, r2, r2, r3]}], 0x30, 0x8840}, {&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)="e43b93be8377c94105c462dbd77c1cd304f7ac74bb0a31e6603cc1cb739c7decea8392a865ee985b99364b5a5733917945c18e875044e0c8870c5d2ee42f5f6f454dd373140a7dc2daa0e11747401aaea79928e5739fdb690e9e04b32858878c32220b3cdaef96a2f606b4f9beaf3c6a2fb24d1bac20b3cf78e8dd6e42dc273df57598364c2743015c0b41d3bc2237cfd722", 0x92}], 0x1, &(0x7f0000000b00)=[@rights={0x30, 0x1, 0x1, [r3, r1, r2, r1, r0, r4, r3]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r3, r2, r2, r4, r4, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xc0, 0x200008c5}, {&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c40)="de72267be40f8f7c98d94ec47d695403556b8d8809c85cbb39aa090ba8140c4582608700b0e849bb44d6fe1cbb7dfcec50f1c4973cef1144a11b707e9d20095ef04f119444e146bf1a91b7a900914224050823cbfaa283bc24241e21fada336cd2a7c789d480bbb4a68cc457351f02df2bc04a395e6539b601d8a434ac94cc3bf1f2a2a2bd7a5aa68cc433ac8d2a3f3049077c1d5a79ca17a7307992ef5daaa5580cbc699fba123bab1f9751be8b84a488a1622ec9a26db1b05e0060faa9a5c1bcafb884c788a2bc2ae7b75648", 0xcd}, {&(0x7f0000000d40)="e54dd4f07a217925c08d0db58703285a0f5583a158a7f307e3dcd2c6a1024c0ed2d3319be62048c163bf4487234bb0730db56216dd7cc099849f5f9933d042a3976660fc038206c509618ab436f2ad1fa8607fbe80221cef9f743dc88e1fde4d4a46c362d72c051cbf3c8272d8c5aee34d8db2900ad96dfe2f25ad18e38bb964f7269b6ceb7873bf04db203ffa45710aab116652b02902f30271f891360557f6477289df", 0xa4}, {&(0x7f0000000e00)="695c40b5aacad4fa6beec9c4fd61b6ecc5e824e3e10f9b2a6e32f8a79c616cb6c5d63e124f58addd0ea831e4ea6037a1070d1cc8afde16a0ac01644d9026c1f2e212cd70fed187ef55dfd0531d012e5d9481bf9f5acb964502112885bd4b325b5a246e613b7bb33e449399ba4c82a95062615fa6f4ef9c41ea32c57d3315a8a10f93c03e17e63381a2468a9d7a52b84b36a93c13a0314e5ac9ac", 0x9a}, {&(0x7f0000000ec0)="77d3c210989ecf7393c51409642867105c705fe9a515f138f33ce4e6cbad8c38b8abdd873a5386f1e641656c876fa2333e44027ecb64d8e1e094270c3c9eedf9dc3b4ca0e94bdf1a82015897d71ea2807c7bf50b99529f9ea84e48c775389a6f1b0ce53b9d0c7da1a5424ad956ce733ac81ad0df3f5a5d7127c7c04a5cb36000ed73fb8ee058a2810218f91bbe448cec7ea72cd0568ee712e09ad1", 0x9b}, {&(0x7f0000000f80)="fdde8de3f4c52c2b3ec38912837253c9ed2110e175986fd725a51dd3661b152909b1823ae55f6d26f34cee97d237f5b4cb4237a6d9e71f571bee65bae4874b10b715c64cc0f892daf196519a4199f6ef2f1dee27e34c2f2a11fda26bd80943a8b8671cbf6afb95aa9c0e49d70f177864666724198fedf84ff518f0276af9573918e231d6952076b2cb793b1b96f43c4e4fe4dfabb2c0640d1a27f4334f3740b90a89548605653d10ecfb2c910834c19fb4cb759cd4d13f48e512eac5a4f0fe381aa6028240ff6d2306d69055", 0xcc}, {&(0x7f0000001080)="f5f71a9238fb84afdbd50bc0838f95201a314b67cd36901bc1cd3637d6ab0dd80e436bd95a712ab4", 0x28}, {&(0x7f00000010c0)="0cbb7df1425ab07865f16730ac77cde15752a57df47d1fae088fd7f63724bc74c8e108cae5dda8be37ab4bd1d92582f079183e55e4da276b686f00cd83500702e81805052f9c512cafed6bb02531a6739c43c98cb930fb174c6753cd155b89d0acf14643fd437f56dee00af61a9f29e28492c1b8da96c6b9967a54ebbb350468a48ed92040fd", 0x86}], 0x7, &(0x7f0000001240)=[@rights={0x20, 0x1, 0x1, [r1, r0, r14]}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x20, 0x1, 0x1, [r0, r2, r2]}], 0x58, 0x8000}, {&(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001340)}], 0x1, &(0x7f0000001540)=[@rights={0x20, 0x1, 0x1, [r1, r4, r3, r4]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r1]}], 0x58}], 0x5, 0x4000000) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000012c0)={r2, 0x0, 0x2, 0xbd}, &(0x7f0000001300)=0x10) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clone(0x4110400, &(0x7f00000002c0)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="b79f198b01605fd2357635b8a6665b9d0a90171617c43fdc28355c02bfffba26a1d8e4ab3d9df412e4c5d2") r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) recvfrom$packet(r0, &(0x7f0000000100)=""/38, 0x26, 0x40000002, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) [ 2648.185070] binder: 452:455 ioctl 540a 7 returned -22 [ 2648.197219] binder: 452:455 ioctl 540f 200006c0 returned -22 [ 2648.209216] binder: 452:455 ioctl 8904 20000980 returned -22 [ 2648.218137] binder: BINDER_SET_CONTEXT_MGR already set [ 2648.231040] binder: 458:459 ioctl 40046207 0 returned -16 13:44:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0xb4aaabf0bf537646) listen(r2, 0x100000000009) r3 = accept(r2, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) fcntl$lock(r0, 0x27, &(0x7f00000000c0)={0x2, 0x5, 0x40, 0xff, r4}) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x87, 0x1, 0x0, 0xfffffffffffff001, 0x80000000}, 0xc) r2 = dup(r1) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) sendfile(r0, r4, &(0x7f00000000c0), 0x3) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000001c0)="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") getsockopt(r2, 0x40, 0x1b582300, &(0x7f00000011c0)=""/137, &(0x7f0000000100)=0x89) [ 2648.256234] binder_thread_write: 11 callbacks suppressed [ 2648.256256] binder: 458:459 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2648.288872] binder: 458:459 BC_FREE_BUFFER u4048631200000000 no match 13:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404100, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup(r0) poll(&(0x7f0000000100)=[{r2, 0x681}, {r2, 0x400}], 0x2, 0x37) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) sendmmsg(r2, &(0x7f0000004a00)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x3, 0x7, {0xa, 0x4e23, 0x8, @local, 0x81}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=[{0x80, 0x0, 0x6, "60dec132dbf15d00373077004c6cede10fe3184b26624ee0e51886d3c9b1e9e7d773ec90f2bc3206deec82887c4e687b6c6160b71abbb5f26e3f34dba305e05ed1c2d028c7c8e456427158905369088bffc1af9af8accbd9047cc9d538817ff7c7c032242ff9ec8e522805fe817901c4"}], 0x80, 0x20008800}, 0x8001}, {{&(0x7f0000000400)=@ll={0x11, 0xf7, r3, 0x1, 0x1e09, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000480)="7ef3462b8a1ae41e63971feb46cbc640f259f2d59729017b19d6dd6c864316e9f8452eb0c3230c8c1756fbd3a84ea59e648c7d1a3c2607cc8bfff4ec5c992b969098f112949b317941359e2709c89d9689570fe50ebc8610bd59478254d339aad6d4c04a981f8756d663ae35f1a9fb5c9f4103768d3a101857179cb5f87ce39aec7e4d36844a16f3b44eda4c1afedcd6ecf24e53d472bead8c7b15561142160d012ec2eafe34888bbf8e2943687cce8262267d2c607d1ef3b67f8e012bd054015149e82cc67d4f1423cf55af51422f528f275c3e40a2c5d1cc8dc08d3420f13f166907", 0xe3}, {&(0x7f0000000580)="6bc008ef7ec3575dd300e94ea229c51360a500b6a32f08b4d50c339426cf3061c16b0b2fda97172eae029ec2347bb49322847a367509855ea7145bbff4c0b8d8063695b49dd1c36d181eaac84a844d2a5215ba1f641c48e7c4dc77199fe3584d9fb0f8058bc857e03d15d053e9", 0x6d}, {&(0x7f0000000600)="c2480f763d9047147315b2d8f386333de7a5d6b28ad6e0d3e91601cfdead84d9ffd6a2dd7c2c023267fe103028be078729592c924df64d40060d311997cee419ba12dceed5907524828f93c64c25869d7158ccd7c201ad8cb277ecc3609ddb5b34c0bb368f75b0565edd667a71a48faf5e030b3d5257b214b82b753ddadae9f9842d01a658d1fdb9be9bb4efde77f9f594331000696492147fc301e691ce4815c4ad316080d22c60e8d3c298e89bd690ed6422ca8bdbb088ac9ccd65b956c91cef1393102e5c1018f24175b4cc917d46cb42016c598b9c79f9be089e2fd7eb6c3534447a67f702fb", 0xe8}, {&(0x7f0000000700)="8362f97d816605c9bf559862fa14fc28496f058b5dad08ddc25d1448c4c4bc09167e74e7b50625e02f61845c0d54666fa5ae8ab034b9007cb41f101af6bce25b2f80a1d09065172c9eb0247aa7d1cc8a8d4b65e40f53b559207ea9", 0x5b}, {&(0x7f0000000780)="96a6222b2b691692fb487b15df5813ba0ce7a3ab5be10dae2eb2145a16d4e637894bac0df9bd63b10a246a6c811facb3fd1f69f1ffde9fc7b61ba8f24bd395aea4a9c2745e24ffec387bdbf272d0d990aa8d0343b3e9b8a321ae26567aa7a92280f1c4d18f03d1a1833c5ba4e94efbe24bf93fc54919f484a3e4b0cbb6ac0589fde5b5917fd3183113e3e8bf7f9f3f6b8268d2f30d33421897cfc2f98dac8eb80f27101e6045562c3d24c23ebf54d6fb41e4feac270ddd2767bc6def5e4d370647914e199f674cc8b837b85a7543f7c6637f3e923308", 0xd6}, {&(0x7f0000000880)="5c5639e7e20322b02563656763b66a4eb41a85e37e321566aaa5b4cdcc23a6203691baf90c3e8349e52a70a3b284bf4cbae5e9d68acd8da7e98ff0fc142c5fa271860c5cf4cc296de5da2adf98c8b385e13ceb3be9befd3959295991d2bd3954e7a1966eb387aac32e4728f88608f9f448699f3f8cdaa3e0be41915978df12c8", 0x80}, {&(0x7f0000000900)="689653692470d928ca505b1170f9702704075a200e445262aceb38925dbaccd0543facd849c66be354f877f890e136087ecb6430ff3abf8f7b79574532b93bbabd395ddb1f71474aec03c875299838268ca22b51b9f6b9df66760a045e9ea5946a1f3da9bddacc9983b8fa42", 0x6c}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="603a7da7e5dd93c32750b5078e4f347e9b580cb5b15668766c6130cdb23d988b409e208382cfb68a3fa513bbb68eefa55d0f812d37ea8b259cc156316d419c3dba44f1acdf8ebac399754980cfe488612a1ec3c5abb7e5448021a3e0bfc4181cb54292ebea191568819c3bdd68bbf6962ed2bbe12239845eeb145ed8d4f5edd751422e19f06545c5d7f68932d0be48b6d6c98f84b476fcf085fdbc39b9c67938150bcfa3d286d5bd7f14f7215315f1ee80ce45797900292b", 0xb8}, {&(0x7f0000001a40)="7657d94b05c8b0ec536eac53451250a2643e298b70b32134764dda4ca0762fa53f7f2e83555adad3b4e7d86dabcc0f0202dddab85bc4f74c4d644a75caf97667960a94e6ad622d446c1eb0fedc330bb6fe704c2a0d528219a56734f735fdaf917713d570592b125ca0762fdf9a374b97bb3709133af779d6319c8f382cda91e66a03f988ff19f559f0c9202bb75578cbc2", 0x91}], 0xa, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0001000000000000000000008e0000005d9e9d708836890395b47da55a204278ea1557eea965a002d388db120faea6968adfd225e43a8c477c6dc62cd0d856f2a39b9b256ce3be6e6571787c7b959e529cffac18ef1e294af8bfb462de5b125a8892c6545bedeeac4bf9332c2e19d6d87414f0854e34607640987aac17ae9cd0a17ebc3862f0838d064d30dc150318cdf96a713c97dab34a908863f4b3014276afea923df05a20094005af020c4a3df6cd4fdeb732e6a2a399d427b6b0f633cc5e1775f156450b9cc343cfa7045b1ca242fb15210e2b1adf0986a8c0a6c075a85b31bc32708776abf4ac40ab911142c16898fc0200"], 0x100, 0x800}, 0x6}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001cc0)="808b54ce828d0b8aa7931b71ef65677e9feee96cf7ebedd2ee248f95b8470be51bc68173459d52f079ea03c1865557929d4e53ba52406dc2cb41490d74b35851516d99ad2410dd38632628af1a44ff333f140ae8d36ce434", 0x58}, {&(0x7f0000001d40)="ed10a4779aa65f7db63b4757de70113080973612483f59114fcded092af7a413545ccf5133fbbcb5dc940d58de5adf497b4acd7a48dea5eff4a40c5523", 0x3d}, {&(0x7f0000001d80)="18e7a82afd06d16611ccf6b779249c144342203f0a45de54ddb9ae36fa2f857d4886c43e1ff9bee249a83d7cef9e9dd8a20364e01fa32ac693bb83352833f6f0dc7aa8f6eee37145c74daa48625fe083935ba84e1506fdcb34", 0x59}, {&(0x7f0000001e00)="634f7137f7df758d363391726a013156ff2f7669e6ccc687e135b4970bcdf3d93697f916341756995fb39c9d7be40bc15e2b1a37eb362f77eb805311192e7da6662a7164daf322e490be77e03924553af6", 0x51}], 0x4, &(0x7f0000001ec0)=[{0x10, 0x111, 0x2000000000000000}], 0x10, 0x40000}, 0xfff}, {{&(0x7f0000001f00)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x220800}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f80)="11130309724821f6e6f09b2ea013ed6483ec8fc222fb220b52af58783032c4c2194dafecc349f6dd7cf88cf350244441926c52d79c0a0859192cefa4934a126712485f3c", 0x44}, {&(0x7f0000002000)="7f5acfd92bed0fac3bc8ff2a5f35610ec1777a1bab98c0", 0x17}, {&(0x7f0000002040)="ceb5b8077cae190e9c032a963680b8bc5ae5907cbf4258390482b84d96cf6ad380d04c9030ac55ec9526557ca55613527d8235d542dc15ebc3590da5ca2b27e5275f1999259f57260bdc1669b61c053ffe7150b9999575d4aac995c4154706ebc0f761de8ba8a7b2c49890d97152a6d502751db58b7d8cc1e207fc3dd74e336344df7ae197540f5e7668f17bbea6a433c85d0da183bfb4b664fc537342cb90fa98d51aad7365973c5c1c051d83afeb47d399586005e5704aa042dc9c63de2fad9160431a744d8fa4ffd369556895ebeac868f4ecf6890be865cbf8d7859e5e7f807cf64f36b167d7cf6737", 0xeb}, {&(0x7f0000002140)="239893e0954ebf357190a99dc6351706504e1c5bfab1685ccb76540e2804761bea3f661882334f5b540902400f80b9a0a211d4418dbb7ac614be4bd1796fc7ba6c7e16c3f18b9a768aa9ca4ed48b77d4dc909a034673f53c9af8346c968a9569c800882bc4fab9c9c91dbac7604c91ea13f61b791a46a87d07ba9cf874de267428897f1ca0aff492a573e637fde13dc0c4decde1ebaaebbe0fff2be439523d07c49c4a11a602c3cd08a669435bcbb255a0ba68dfb4a700375b5231", 0xbb}, {&(0x7f0000002200)="d26ee5c7e6ce059198f4b8a9558a9aac84ad205022", 0x15}], 0x5, &(0x7f00000022c0)=[{0xd8, 0x10b, 0x5, "67508f9f169d7ef575096f07696581ec5a93026d15b2c3800f50eb3cd444f1a07b51220a4020f19a3f3f9af96dfcb6cc379b9c53dd70b51b612bd73eda237c893cdede7ef6d374ae7acfcc3f5bc8383537ef53dbcc292dd84c95f69134c5fb330e63acde98c3d4df40aef064c3822fcdb5de5339e8a319d05983f63ce437b29cdcbbf938a782b6b31413e00457948b5597b5403240a8d2d76520e55d97cc4aa76ddbacf6d98900b70b3d54460aae9148a85acbacd05c4a7e3b993bb4a3385013416002"}, {0xa0, 0x114, 0x6, "047e65ecebfc63aacba11af4148380ad12e8b7949f2cb9984e3c750c061bc70c1d5cd85aa6bf47ad903940a67c41e5640bff2b8322c63f7b47bb7e853f5880027064c6890846ca71366baddc6bddfbeac5100ab5b4b8a0a3f1d56779e40ba45f7fa0d5eb39516bcf7da5b72df65b45b87c1ce7fea0d1f4fd58c3e000bca40874a1b8532a1b9d21f9f343"}, {0xf8, 0x3a, 0x2913aea7, "3fd15534153d188ecd16d2237ab38b5afb15492babafa7e5ebd67fa5c7609573a1f81d15a979f64a2b54ea8801b938b5aba1034d2d07233ce47a737ecabcaf3773819bfcdbd9a6306517376f5b7baf696771a09dbf03ddb6c40dc51a105e6b4c564747e6f3498a6ec72b7715e1ad45a775ac6a21f9de3fefc31f6d47657416c05e63946b38aedbe3cd3ffdfcaeb019470041cb4330a8fe90a633928562d9c25ff7a123dfb48db43fc7a1ccc30a5004b1ea6705ca7eb02491d340772963d319eccc3404745346af38c69c1bb1c41d936c48a42831baab2d13b931ee859dd20756fd68715d"}], 0x270, 0x44001}, 0xffff}, {{&(0x7f0000002540)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000003840)=[{&(0x7f00000025c0)="7139d7221d55a38729dd0eb6000df9f294d543662854631207739eccd6959a1b06e36aeb4aa153e78c4cdd63fde85112ae3977d55134244fd074c5e098b6ac7e15b2c7fdd46297adb3a8b6ba0f8a039cae734971cf37652a136b7dbf288e012b457fdd6df3417a463d92d0eeb1a534fa601840773fc653fede14f19ca77e4ef7621d350dbf434657aac3de1bb5480106356bd05994397a", 0x97}, {&(0x7f0000002680)="6a8a5c0f218941834f6dfc449a55c4da2ebda56f3053eba11a4dc968e2fff1df056b53bbdf7068af9dd6eaaf9651a663145f37c4b86e4ef888d6c75c4bae54b050f1d72cbb84193437d6733a31160a482b5c1ab5e736a918daa268e601f068ad5ffe60e2d5ed6da160890484ad84cd508501451c74a4444ea5b51d081bb391de91c757a3ffce5a0eba4f0a87d403e7f3adef38a5133fd334dac630021e6fcf8aecae57fa", 0xa4}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="4ec8d7642fe90b0b33eed314072bb9dc06ec8941426584d7ef66aae81c076d42c6f5910e67b98140893a5d20077fe19e31420e771b4ed934563c49ea9d0109d886df06e02c389d96cfe286e0d456ab271de12d249bdda0492028a7bfb72555282c7e32f74ee7ceef1d747f3f7d5ff402a76776666be2d58f5d1f127700fad422b0e166dc705f5bd890d4c38e3b5029add27f0f4e6ad08258f5a2487b5e9ff7baf250751138b91ceda7b315a4da407356f20383224dc84ddca9ad0e40c47f0696fee0fa762a043d07969ce33bbc6c45cdc36c5403a7f897835691505db93f9c22ff9ec387", 0xe4}], 0x4, 0x0, 0x0, 0x1}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003880)="30235df8093aa573e94c33a99a133e68243b3184cbc0bc0c7101df130efae73f0af1ce8a9156cf66ae034cd4894aacaceaea67d033920b62629ea7250839009c0a56f98150b605a836be944109e35d34829b", 0x52}], 0x1, &(0x7f0000003940)=[{0x1010, 0x11f, 0x5, "5e4b8e12515f3febb690b5f6cb1b2c9223190ae5c7d5242c25efe06788a1574ca08ff4c8609de0640e6d42ef8b0ea3207b71f88c56b5a34edbb4674ab3e1402bafd9a61f79b51946c6064ec397f5cc224e470c1e740aece4afe290fca627c1b91f9e378dfe5469492aa177ec5826679e248e2ebd4ded085bcfdb381d47980550dae0fd8721091f8384fe85adcee2cdcf5eee1df06977657d25611e068eebce1a91e595d368a2f31f8c2f2ec526ad1c459a8bcda20e69bee83ef462cda9e596bd57740bf8463b3c88fec60234e330b412a31117bcd9b6865d5ac6e67642866918a2b93ac7e3d38ac2ce0da94f9b230e7245d077110c73b8845443be94ea98ddd79017226b9df6bf214f8cee651ac8fbef57667648ef584bc92cf8f53aceba81d77b402078278ecbb53b8ca862a811dbb56ca80ed56692e0eedc29bc1c23e14aec0b18720165dd95aa2f08ed04e082c4c60c832f52479796466b61e4ee0cb81e74e1056d6146a1881fdcfdc95eebc39b41f99dfd2b8fa5bce0b096844c7bb5467a15248802dffdcf6e38403b93f5d76cc8de15312734f4892fd1efcf0706c484164bbc8e14aa5cc8db8f5d1b3bf3369ee3bf6c26082a5ba67642d9f77ca2d05b2b865f0ad4380c49b95f68f9a0d53f8279f913e050c60aa7918ca6be9ab83ac2056f5d50b4ded85549e4b09a06d0915e3fa78b97b0bea72b4f15fe300747a45eb4e52e1dabbba787f6ed787fef18b6589ae30119027eabf1a761597ebcefab1eca56056ac21c78a3f77617e35d0a024d8d3adddec89d30c7cb5145e3a2e4f8c8e05da367a31770763e225ec52fe682be8df211d11af9afc8f2ae89178112fcc623119a9681b187834dd72158af09394a428deceb35376bcdae0ebc65510043103cd0ed655ec9700aca4df285105a1ed6c1eb0eb1dfb8834cab23a08aee7536031ca28535abdc4e3a4f3520b267fcd3e6d25d57db021f974177bd2059c262b5f0be81f6f9245c94a4d118b9c64fa30a6e7fb9b41c57c24168189497854038da905c5af79b0159e58d2c9011548d7d850920f38d4dba2b43567aab03b729f19eabf0243c5eff53b1c6b87e43c457b464eaf93fb3d12b147a90c5eb4f4629d5ae74b00feffa5f3dbb34ef6d648e62eda4bec2dc6ec24379a2d6fdbe5c8d26e4741aef4674a4c29b28f395d8fb947fc6f26b0db1d5b57417d0f4ca82e1f2b0c8c3594ea5147d6f10b9d1187f9cee31490dec1d8988e286dafd50b045cc5b266a8b11c582ad6413c30220083bb71f0d63dbf97de4dfc3ccf0a95fe6f40a0fa8f2a50be2d95e0f17bd4d2d7bb310a56b7139fd0fa0d1d77c427394a6b01a0ebf1f1a47c8d8cab922a3a7b71d75867e4585fef7e95b7f2289ca187455679d064105e98484a442b7fc5591b0a158d02a7b18a5a36e728b1ecff5e3155f1c5f185a51019c55dd81a1f817f31fe6d8c73fab5f90826a5d4a44895afa28099275c06627109070584a870a375d33ef2ee4f01b6957286ec4ef3fc069e44cc1952cfe469cb0a92e1f2c22a01bceecbbae59625eb743b3c27ade256369c77708940902dc2424a6503cce80701b9ec7e24301d00a66215e3c50be17fc1b01603272fe59dedc68d84223f34affff7df5c6c7292a6629b7194ba3617602438bce724e1e5903062bbc56204b82db3d67e78145b93af52ab033fdf4ab7808c78540dc04ca92b767375c0eaa37538903c5c06bc708c918f9695dd5b4c3fff08d7155c5dadad87f89963ac8d7c1ddebf9d4e3c247ecad6160dcaa709355226f80a13cd441e3be9fb11cc245f4a736fb1d30324b7fcec7152e37d4f9acb984c190586adc063289a260504f0361576fa11effcb40c358c56371968f4a2574a2494ba076c787b32429f6f9b482655ff199a6f611ddd3e9b97bcba6d19cbb6de74ee4724997bf658254fd6333d8fed9dd79143080f54c5960b7410e1de6040df995eaab64b232892ba6b9dbd16d2b4b1d54b850f1cd96006047829a2ab4b1e536c3a2d57bb323554f0eda43a660c04724112a3721a76ee39e1ff572396d2cd6bf99ab32316963376902b884ffd812711a89c1989ec079f3fbdcc45455e6968cbd2d8654750638232f33a40b2fdf8219d7c3f3ad79907cf9e83b5a82131fa79a8ece9458bbd7cd56959f076bbe84cea26cdfbdae1cefe5e64e2fd9ae2b6217cc24796eb2d7e3658d8ee63076ffacc466db27684775df6385770fa05839ab8283e039ba935432dec99aca4df51b338cdc71f7dafc41cf97b12f3cce9968270e842fe77cbc562d3ceb440b7d67fbaf1e5d65ff420359215ffe10e2e47fce9122436238733d3a126b0cc087c7d17f75318c1731f31d9b929622a594fde149955d6b0b8739041187fa9546fdf82bc949e1d48652928e91290d86b307518e06203ee6aa8ed9a23fb6b171c0c2449cc3753bad46db387214756b3342d02317c14f962a6e358b22ca10bed3d1d8449c9678d9e18bbdaa7b1b3d2f638958ebbd57d241f91b1a4ec21fc8afd6fcef6717d9346a2a75cb357cda0090074cc0503a69b22f46ab3365fd8a21b9779db56636bdd69a6b55283e2e1e9eeb2fa5874f8d4bb46fc4566898be0d4fba3c0401a5da21106c5f6ed90e9d559c1f8b2bfaa6f765ae89af4bf29817d082b25651e15891de5ccf447f4d18ae07d5fc040173435161a868a31ef657ade05f54e8a0713333832fe891e481373f7dfd6b3070311e571ba4ead3d563d169e52246bb4b9b8eb263aef54e05b27e4be1e470b31012a4c9c884b6c8226ac5db26508f90dab16a856604f91c60bfbf59978c0f112801d16183c782354231869c2546ff96d9fcabf585ed9ab47e26867cf060101f1a53736f50485e10a52d93262f3e927f72649c911d171a650a46516f698dab4ef5f261a085060a2ac420fd67e63d38fa0904444f127b244acf6dcc03be0414b5546209bb1c54635798db7db43557c11b634a927f6dcecd46884a16124f8a48a2775f84b9f9c8abfb2e0332c97422f3b42b3266657c3350f58f09a0b506b56900852b9084f3f628f3beedffef926d628aea31e943fd260e43ca873dcc8d44e5cbf741ca6cdf05b3c8cb9f148c715cc706fbbd26398aa8815ccbb05f13387dd375f81a34f6d971322436816ed4781ed0b5bf8e7aa078e7e21cc8656e1efd854ea073bf30381789485c54d3fcf96c0398cf99f0d351d7b4539966354f212fbb68a42ad7ddf48be258a63bb82b9703eaf5571c127f3cb8321ce56237bc244f3cc54586c3f2a2b25bfec5f4e3e891251bff6b113a8f2415c1b35105fd9311dc51717acb2d1c069fa9a592805a8f96147cd7e58d99fea034f636ef15435798f164ba4b734e07e951aec7e961d60c35daff604592de775ded64f320c663800cca052a3f747b6dcf17ab7afc29f4072bd6c02d07b6ec614e5b8e617d1cfc1c1e8e7d9d081239be34f76dea65ab63464b1c4780e9cd9c1beb7d4b6521a2d93c6a2990e7f300a2b58ce71358cd4e64c73096ead3255751ab1352a8b6b2714e3076a97422d12802dfdc49e08a01131f124f7e516eef11a6f3b368ff1a2cdd8c127af7d8330901b747eff6c28829fd379e34437577b440b98a41a380315e59b9030d7c749e066ac1dc47c16ffb3f502813e274decd9ff7f14959a7ac775e84b33d801d352c276de39c12eb97f6f5828c99b858dbe74a767723a1f33a5d24b906d77ff7259bf23901084fe99306db1da86987d783e42caf0fe024016b14d12fb34676c3864d5637f37efc63f88fb841c4ca664a02003344b9cb804b3cf54969f6f8c52fea758169bfa77da2bee6f95999b1517550980052a5b82b02c5b472b0c27695d565eaf849515615b428469325d4a2b18d1d451326660731bf3809e7d6ee19cee5ffeb5951e7d69f097b9c74a0713ec2e40cff0d021145dd025824558851eca093631d6530dc13d2b91bc8e6cbf11984d6bfde2fc627f0d198771e53d95c4ad7b217eb6fce75af63b3d6a467dfc88e7c2c4c295d94e561542ea48cc3a4bf461168c37e405f282a60e2ef08cc3281ada983b605c517413473c73f315c2bd2aec974c0801222546bae834ce199dde49ddb6aec7db805b83dc08105796913d9ccb9c39cc96bf0a2b2927f003008b517456c91c2f15e90c61794be174995b5d4d6a7b7bb7dcb6160bf6a29f1ce75a4f98c0c4207d0031a6860dc73d9adfb3db132a3b6309b0c4f598f0adac9ae1649bcf7509435aa7cd6c0af437aa8490df7a5e16db6b75cba8f93361fdc393533dcdd1af08e1206a145b235312d6af9b971bd8fcd4081151147c1463c4aedbdd0b8ce9c08e8144deb024cc7901e1e3d6bbf085b4215beb2dfd17cb4d8e5f0446db7a18ce1c2863d42c07a88020c698816b6103f37f14f1e526074c1aa35b8a59fe2b70ec563d6b390e653db9260fd1ce65845fca581b7c0067d5e302b364f682e94c906f13feb74c0cbac950e2fb5aa3a53e1f11a4f08f3e779e1ffff307d44c99127bc4198913cc15c3afc593ef75fb5bcf39862a1beea5f422cd8032cb50ccc224f8d2e829f06f4428502b2a58716877b7c798332def9090422b749707ab4caa3a73809279a5c4b1c2f7e9175ee9bddc99033bbd6e28be17055bd133b0a608ad1c20b2b6fb7eba1745a13815bd2839f29d4a249db04946f61ed30d8ef13645252230e051dd98267b700ec4801ff606e922f64716ed20c963c58627cb965b2624062b9e85f5bd1d846d8ad7311efd71a5bd16f72e0addf8e2a961a927da9de2887f5d32344f05c2064a551c402590e2df0ce57a128803ce46dfa2595ad28e3e8d772cad26460e6862e6e30c9a254a2428bdfa1b9092a5b43357b1049e4d41d8a02e15d1e66796687cddb362ea3bd40e988d838250517d19ce9869bdf4847c491366a9c1b19a78402a076a09f425d11379ed01802ee03b12848ae3385ff8620f36c1957e370af96ffc242e3394fe9e3c8a47061fca5f1054deecec2fe91a6f751f50efcc57ec8411ba888ea7b2a859f165fa769c3e6ec824c0233c53d7329472898b6e1e451ab08aed7c2caa4b19d0fa20484c6c535b9e6d1c1460ac711b015aa2b8a7ff8a7194fe356eb9cdd240272a90821cf70a0bc15606c7cf789ad4622b3f875c1fe85e74f25415fc747fd76624fe517c213a55902a3e1aae29cb2c029c7fc8cd740b6756b3e30358b44b4ea93a3f033b4df91173fb702e24616b9e7c25ae318c0643f466d1bbdbe7d1db36dead39a42194e6d84ccc6fc8f866be7485c22a0969d9bfbb8a8b8efc519fbdc642d1cd7330f1ed2d9ad0161d1a1d6eeab8ca601a5c257ee63c37dd5debd633ba9c173d55d33a7ec639710e0c24114b693b275ef60b1f98de2b26287eb2701f5f05bb4448d719e8369278348808c16303752c165ecd5ec62ece1c5d204e66ac489b1c3a5123a13c34ab50cd18f0b3a1e6667b24a3c8eed609205020140d780b5ad8ede3a5e4556db32fac03913ffd8e7858c446b144d3e278b5e89bb7ffe535c31e54c889bbf9c021957b0127137b75b62c9b573f41de0ed27c1b9a3cef2e49b122ebbf660fe4613c20ca89793b144a9664dd305aa1c143b63f08590b056570591021d2b538aa1111fd597b2d751fbc6919572c96d655d3fc9a5306b4d5389c5f5754df1f838c51c379c15b2145ac624c04c058fa106747eb960dc6f919a442b91ed1786a35fcb8249a6f9f8e627a2375833c455327b9a2152eb64ec17f0e4d1f67c3b4d2885b7105e7e9be922ca7048b982921ee1a98b46076bc7fae820cf7442"}, {0x88, 0x0, 0x400, "068ae5f1e47c1dddfdf6aac25a49784fb5c95b23022e0b23ab3934df65e0f4d0c33e6926adff83ed3723c41f1c4ea248238f295d879bececd5d7342baad860bd81bd717da45a7e02698010480ac82f72dd15e8546a05ce3a39ba5399d3f98300ae960494b0bc5a457659a55f62a662943370d647"}], 0x1098, 0x1}, 0x35a}], 0x6, 0x20000000) r4 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0xc8, 0xfd, 0x2, 0x7, 0xffff, 0x8, 0x8001, 0x7, 0x0}, &(0x7f0000004b80)=0x20) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004c00)=0x0) syz_open_procfs(r7, &(0x7f0000004c40)='net/udp6\x00') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000004bc0)={r6, 0x6}, 0x8) 13:44:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x400c630e, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2648.312101] binder: 458:459 unknown command 0 [ 2648.320595] binder: 458:459 ioctl c0306201 20000680 returned -22 [ 2648.326858] binder: 467:469 ioctl 8010aa02 20000000 returned -22 [ 2648.337100] binder: 467:469 ioctl 4b41 200001c0 returned -22 13:44:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046302, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2648.400867] binder: BINDER_SET_CONTEXT_MGR already set [ 2648.406366] binder: 474:475 ioctl 40046207 0 returned -16 [ 2648.414676] binder: 474:475 unknown command 0 [ 2648.420256] binder: 474:475 ioctl c0306201 20000680 returned -22 13:44:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0xf000) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r1) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) [ 2648.445759] binder: 472:476 ioctl 5429 20004c00 returned -22 [ 2648.462359] binder: BINDER_SET_CONTEXT_MGR already set [ 2648.467935] binder: 477:478 ioctl 40046207 0 returned -16 [ 2648.475405] binder: 477:478 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2648.484388] binder: BC_ACQUIRE_RESULT not supported [ 2648.491132] binder: 477:478 ioctl c0306201 20000680 returned -22 13:44:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x400c630f, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2648.557181] binder: 484:485 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 2648.566084] binder: 484:485 unknown command 0 [ 2648.571316] binder: 484:485 ioctl c0306201 20000680 returned -22 13:44:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="c867dff8c5345a816143115fd6a72d47a09623d439c060b04901d9c2c13a210d70aa64a4ec81fa2e67ff903c7d435bfd179abe7e17334ebc1d4f0bc8271ae69fd6fac3d72e4cb2228ff7b88bcd34d85922df76930b575cd3607c6a421341472fda7fdcffdb96358374ce955388532adf1157872f317ab13cde5470a76c6f3277fb1156cc33861878aab2d2d80e4bb14730", 0x91, 0xfffffffffffffffe) r5 = request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='&:^\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r4, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/binder#\x00', 0x20, 0x80000001, 0x20, [0x62, 0x38, 0x65, 0x3f, 0x77]}, 0x3e, r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x412, 0x8001, 0x1, 0x0, 0x0, [{r3, 0x0, 0xffff}]}) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40406300, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2649.028013] binder: 496:498 got transaction to context manager from process owning it [ 2649.045707] binder: 496:498 transaction failed 29201/-22, size 0-0 line 2825 13:44:20 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60, 0x0, 0x8, {{0x0, 0xa4, 0x3ff, 0x4, 0x1, 0x1, 0x25, 0x2}}}, 0x60) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x1000, 0xffffffffffffffe0, &(0x7f0000000040)=0x8}) unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000f68000/0x1000)=nil, 0x1000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x7) [ 2649.078473] binder: undelivered TRANSACTION_ERROR: 29201 13:44:20 executing program 0: remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x9, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x5) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(cast5),sha3-256)\x00'}, 0x58) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ftruncate(r0, 0x7) listen(r1, 0x100000000009) socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept(r1, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x3, 0x8, 0xffffffff, 0xcd1]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000180)={0x8, 0x6, 0x3, 0x0, 0x12, 0x3ff}) prctl$PR_SET_TSC(0x1a, 0x3) 13:44:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40486311, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/kvm\x00', 0x2000000000005fff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001440)='/dev/null\x00', 0x400040, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000001480)={0x40, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x111000, 0xf8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0), 0x4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) lremovexattr(&(0x7f0000001380)='./file0\x00', &(0x7f0000001400)=@known='security.apparmor\x00') timer_create(0x7, &(0x7f0000000040)={0x0, 0x33, 0x0, @thr={&(0x7f0000000180)="6a6bf9aaa7dd35c57643a55ab90c185b9df80b61933b2519a4e4d6bcad8ce55aa83a5c7c048663f6815d3b38534b4ab57d38af9aac9a774a02c56b9b46cd71fda64168ab7b39f7dfbc090259d23a685595fc4c574c0449f195f69d6352f927b8f55acdabcba71e0f772ca491a45831911cbf804b43666b194edf5d56b1bb9d8be98187f22edd6a74447ec0949829bc885b1a262d0b4a39d6d96d0833189c71356541515daf4e8f4378c7ae1fe28610f4b689edd4ba58749f21df295fadd361579b4efc9f2aabb6be522d780094c3733928d9c4ec615eef601cb2efea39eb", &(0x7f0000000280)="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"}}, &(0x7f0000000100)=0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000001340)=0x100, 0x4) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f00000012c0)={{}, {r6, r7+30000000}}, &(0x7f0000001300)) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4004ae8b, 0x0) 13:44:20 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r1) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) [ 2649.168525] binder: BINDER_SET_CONTEXT_MGR already set [ 2649.179286] binder: BINDER_SET_CONTEXT_MGR already set [ 2649.184758] binder: 511:512 ioctl 40046207 0 returned -16 [ 2649.193381] binder: 509:510 ioctl 40046207 0 returned -16 [ 2649.200878] binder: 511:512 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2649.208843] binder: 511:512 transaction failed 29189/-22, size 0-0 line 2834 13:44:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x630d, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2649.255867] binder: undelivered TRANSACTION_ERROR: 29189 13:44:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) membarrier(0x40, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8955121e0469e47c0cd28ba3f9340000005500ef03008d00e6a82058fea5d5cac2b7636fc851f79692491504befdba1ffa8056316dfa6b3c5641009c59b538d95c95e26f973e1a462babc3c61b2fd8f831ced4"], 0x34}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) readahead(r1, 0xffffffffffff0001, 0x400000) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2649.298534] binder: BINDER_SET_CONTEXT_MGR already set [ 2649.304208] binder: 527:528 ioctl 40046207 0 returned -16 [ 2649.312157] binder: 527:528 unknown command 0 [ 2649.317007] binder: 527:528 ioctl c0306201 20000680 returned -22 13:44:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046353, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 13:44:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2649.884903] binder: BINDER_SET_CONTEXT_MGR already set [ 2649.891929] binder: 545:547 unknown command 1074029395 [ 2649.897674] binder: 546:549 ioctl 40046207 0 returned -16 [ 2649.903363] binder: 545:547 ioctl c0306201 20000680 returned -22 13:44:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x480200) truncate(&(0x7f0000000080)='./file0\x00', 0x3ba) 13:44:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046354, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, 0xffffffffffffffff) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x0, 0x3, 0x100000000, 0x6, 0x48, 0xffffffffffffff67}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xebb5}}, {@max_read={'max_read', 0x3d, 0x29}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r6}}, {@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x37}}, {@uid_lt={'uid<', r7}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2650.086773] binder: BINDER_SET_CONTEXT_MGR already set [ 2650.107758] binder: 558:567 ioctl 40046207 0 returned -16 [ 2650.121604] binder: 558:567 unknown command 1074029396 [ 2650.137238] binder: 558:567 ioctl c0306201 20000680 returned -22 13:44:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x24040, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x4, {0x1, 0x8}}) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x4c, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2650.265382] binder: BINDER_SET_CONTEXT_MGR already set [ 2650.281621] binder: 580:582 ioctl 40046207 0 returned -16 [ 2650.301388] binder: 580:582 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2650.309112] binder: 580:582 DecRefs 0 refcount change on invalid ref 76 ret -22 [ 2650.316862] binder: 580:582 got reply transaction with no transaction stack [ 2650.324503] binder: 580:582 transaction failed 29201/-71, size 0-0 line 2741 [ 2650.356041] binder: undelivered TRANSACTION_ERROR: 29201 13:44:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x6) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstat(r2, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x100000000000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x7fffffff, 0x81, 0xfffffffffffffe00, 0x2]}) 13:44:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6c, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2650.775180] binder: BINDER_SET_CONTEXT_MGR already set [ 2650.794729] binder: 591:595 ioctl 40046207 0 returned -16 [ 2650.811511] binder: 591:595 DecRefs 0 refcount change on invalid ref 108 ret -22 13:44:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x400000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2650.823671] binder: 591:595 got reply transaction with no transaction stack [ 2650.833503] binder: 591:595 transaction failed 29201/-71, size 0-0 line 2741 [ 2650.863666] binder: undelivered TRANSACTION_ERROR: 29201 13:44:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xc) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x10001) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$void(r2, 0xd29a06aacd0b28b1) r3 = dup3(r2, r0, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x3, 'bond_slave_1\x00', 0x3}, 0x18) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) [ 2650.909308] binder: 603:606 ioctl 540f 20000000 returned -22 [ 2650.925871] binder: BINDER_SET_CONTEXT_MGR already set [ 2650.935148] binder: 605:609 ioctl 40046207 0 returned -16 13:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000001c0)={0x7ff, "bbc1f370d4f4f9f18d95cddc3a91d16412ad504802de5d7d0be753fbc6d0076f", 0x3, 0x3, 0x5, 0x3021708, 0x600, 0x4}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1000, 0x6, 0x0, 0x5c, 0x0, 0x8001, 0x50800, 0x3, 0x1, 0x1, 0x63, 0x10001, 0xfff, 0x3, 0x8bd8, 0x1, 0xfff, 0xdb4, 0x40, 0x2, 0x3f, 0x61, 0x4, 0x1, 0xffffffff, 0xfffffffffffffffb, 0x80, 0x7fffffff, 0x9, 0x4, 0x3, 0xb1e, 0x4, 0x0, 0xd8d, 0x7f, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000080), 0xe}, 0x14000, 0x1000, 0x8, 0x6, 0x2d10, 0x80000000, 0x100000001}, 0xffffffffffffffff, 0xb, r2, 0x8) [ 2650.961823] binder: 605:609 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2650.999337] binder: 605:609 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 2651.007181] binder: 605:609 got reply transaction with no transaction stack [ 2651.014805] binder: 605:609 transaction failed 29201/-71, size 0-0 line 2741 [ 2651.023657] binder: 615:616 ioctl c050561a 200001c0 returned -22 13:44:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x3f000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x1000, 0x8]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r4, 0x449, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={r5, r6+30000000}) [ 2651.059016] binder: undelivered TRANSACTION_ERROR: 29201 [ 2651.111040] binder: 619:620 DecRefs 0 refcount change on invalid ref 1056964608 ret -22 [ 2651.135384] binder: BINDER_SET_CONTEXT_MGR already set [ 2651.138158] binder: 619:620 got reply transaction with no transaction stack [ 2651.141274] binder: 623:624 ioctl 40046207 0 returned -16 [ 2651.159425] binder: 619:620 transaction failed 29201/-71, size 0-0 line 2741 [ 2651.163301] binder: 623:624 ioctl 40084504 20000100 returned -22 [ 2651.184256] binder: undelivered TRANSACTION_ERROR: 29201 13:44:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x78) 13:44:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x1000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:23 executing program 0: socketpair$unix(0x1, 0x85, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000500)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0xfffffffffffffe68) listen(r0, 0x10000000000a) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xfffffe91) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x7fffe, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000000c0)=""/131) r5 = accept(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x20, 0x7fff, 0x7, 0x9cf1, 0x3fff80, 0x5, 0xfffffffffffffc01, 0x4, 0x2, 0x8, 0x8, 0x8, 0x401]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x101, 0x3}, 0xc) readahead(r4, 0x101, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={r6, @in={{0x2, 0x4e21, @local}}, 0x3ff, 0x200}, 0x90) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6"}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2651.637433] binder: 634:635 DecRefs 0 refcount change on invalid ref 16777216 ret -22 [ 2651.661685] binder: BINDER_SET_CONTEXT_MGR already set [ 2651.674349] binder: 634:635 got reply transaction with no transaction stack [ 2651.682973] binder: 631:632 ioctl 40046207 0 returned -16 [ 2651.690139] binder: 634:635 transaction failed 29201/-71, size 0-0 line 2741 13:44:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000200)={0x0, 0xd2, &(0x7f00000000c0)="4adb4e38199e756109ba31ec1c909491390547c2f6369b894a8df19d5ce4e60ab619db1e62b102f68a893dc09a3e03417678721036bc63cdbfc10a812d5723b6153c7340600e410c3762017813f77a21c9e4a7f71630d4ae48d0d0150c84022cc39cad5439e02b6d4535f09bfb3d10c87ba1eb18bf21f44a560e5c1b4005ccaf98da109d496146542227aa8d9bdf7c512147dd1b878b2f133ed34a4240691be632649b249bb99ba70a50a7446be6a7072236d7a514ca848c8092eb9c34b3cb320251ad67898e636e1067b3f03e27793fb9e6"}) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000002c0)={0x3, 0x1, 0x4, 0x2}) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000240)={0x1, 0x0, {0x3, 0x6, 0x201b, 0x3, 0x3, 0x2, 0x1, 0x7}}) 13:44:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x3f00, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x401, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x3) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x1110, r1, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 13:44:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 2651.733618] binder: undelivered TRANSACTION_ERROR: 29201 13:44:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x7f, 0x1}, 'port0\x00', 0x28, 0x0, 0x8001, 0x9b2, 0xfffffffffffffffa, 0x5, 0x2, 0x0, 0x1, 0x6}) readv(r1, &(0x7f0000001b40), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001ac0)=@broute={'broute\x00', 0x20, 0x5, 0x1958, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0x577d0156f17f1456, 0x1, [{{{0x11, 0x20, 0x6, 'rose0\x00', 'ip6_vti0\x00', 'ip6gretap0\x00', 'ifb0\x00', @link_local, [0xff, 0xff, 0x0, 0xd1a1ef3e574eb1d3], @local, [0xff, 0xff, 0xff, 0x0, 0xff], 0x920, 0x968, 0x9b0, [@among={'among\x00', 0x888, {{0xd120, 0xad7, 0x2, {[0x717, 0x2, 0x200, 0x80, 0x8, 0x8001, 0x0, 0x81, 0x8, 0x6, 0x0, 0x2, 0x1, 0xff, 0xadf, 0xa20a, 0x401, 0x101, 0xfffffffffffffffb, 0x2, 0x1, 0x5, 0x8, 0x6, 0x81, 0x4, 0x2, 0x7, 0xff, 0x9, 0x4, 0x3f, 0xdfd, 0x1, 0x9, 0x1, 0x81, 0x4, 0x1000, 0x5, 0x5f, 0x1, 0x6, 0x30, 0x3, 0x1, 0x100, 0x9, 0x8, 0x0, 0x9, 0xffff, 0xffffffffffffff81, 0x1, 0x993b, 0x8, 0xffff, 0x4, 0x7, 0x5, 0xc58, 0x74c, 0x5, 0xe1, 0x2, 0x45b, 0xffffffff80000000, 0x3, 0x2, 0x2c5, 0x2, 0x2, 0x94c1, 0x3, 0xfffffffffffffffd, 0x2000, 0x100000001, 0x100000000, 0x400000000000000, 0x9, 0x7ff, 0x5, 0x8, 0x7, 0x100000000, 0x4, 0x6, 0x9, 0xaa2, 0x6, 0xffffffffffff78ee, 0x3, 0xcc8, 0x10000, 0xc63b, 0x8, 0x8, 0x2, 0x3, 0x2800000000000, 0x8, 0x6, 0x8, 0x9, 0x7fffffff, 0x4, 0x2, 0xbc4, 0x0, 0x20, 0xc5b6, 0xfffffffffffffff9, 0x7, 0x4, 0x3f, 0x24000000000000, 0x0, 0x5, 0x3, 0x1f, 0xc00000000000, 0x20, 0x4, 0x1, 0x3, 0x80, 0x80000000, 0x6, 0x1, 0x7ba, 0x101, 0x4, 0x6, 0x7fff, 0x7, 0x8, 0xffffffff, 0x4, 0x0, 0x30, 0x8, 0x7, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x4, 0x4, 0x8, 0x6, 0xed6, 0x7, 0x8000, 0x2, 0x4, 0x0, 0x80000000, 0x2, 0xfffffffffffffffd, 0xc9be, 0x8, 0x40, 0x5, 0x5, 0xdc, 0x9, 0x4, 0x7, 0xfdcd, 0xf78, 0x30000000000, 0xfd62, 0x8, 0x2, 0x9, 0x5444, 0x401, 0x80, 0xff, 0x2ef, 0x7, 0x1, 0x10001, 0x2, 0x1000, 0x5, 0x9, 0x0, 0x0, 0xf2, 0x8, 0x6, 0x5, 0xff, 0x3, 0x80000000, 0x5, 0x8, 0xd14, 0x401, 0x6, 0x7fff, 0xfffffffffffffffa, 0x20, 0xffff, 0x3fd3f96a, 0x81, 0x9, 0x35a0, 0x76370000000000, 0x0, 0x3, 0x100000001, 0xffff, 0x8, 0x20, 0xfffffffffffffffe, 0x1, 0x5, 0x40, 0x9, 0xfffffffffffeffff, 0x6, 0x9, 0x400, 0x6, 0x68, 0x9, 0xd7a0, 0x2, 0x6, 0xffffffffffffffff, 0x2d2c, 0xb3e, 0x1, 0x60d, 0x1, 0x7fffffff, 0x81, 0x4, 0x4, 0xffffffff, 0xfb, 0x4, 0x86, 0x0, 0xfffffffffffffef7, 0x0, 0x5, 0x0, 0x4, 0x0, 0x3, 0x5, 0x1, 0x7], 0x1, [{[0x800, 0x40], @empty}]}, {[0x4, 0x8, 0x2, 0x5, 0x3, 0x1, 0x0, 0x9, 0x8, 0x6, 0x1, 0x3f, 0x3, 0xff, 0x1, 0x1000, 0x80000000, 0x55, 0xfffffffffffff7e1, 0x9, 0x10001, 0xa6d, 0x6, 0x8, 0x32, 0xe8, 0x8, 0x8a8, 0x7ff, 0x401, 0x8, 0x1, 0x5, 0x5, 0x800, 0xfafb, 0x7f, 0x6, 0x2, 0x1fa2, 0xfffffffffffffffb, 0x9af, 0x80, 0x0, 0x3, 0x40, 0x280, 0x0, 0x7fffffff, 0x3, 0x2, 0x10001, 0x6, 0x23, 0x8000, 0x87, 0xfffffffffffff1e3, 0xff, 0x4, 0xfffffffffffff801, 0x0, 0xdb2, 0x48c, 0x6ca8, 0x4, 0x4c3, 0x0, 0xfffffffffffffffc, 0x8, 0x7, 0x4, 0x33, 0x65, 0x4, 0x81, 0x6, 0x80, 0x9, 0xfffffffffffffffe, 0x1, 0xfffffffffffff001, 0x795f, 0x7f, 0x8001, 0x4, 0x1, 0x7, 0x7ff, 0x56c, 0x8, 0x7fffffff, 0x776, 0x380000000000000, 0x101, 0x0, 0x1000, 0x2, 0x100000001, 0x3f, 0xfffffffffffffffe, 0x5, 0x5, 0x80000001, 0x3, 0x39, 0xffffffffffffffff, 0x97f, 0x3, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x5, 0x5, 0x6, 0xdac, 0x9, 0x1, 0x2, 0x5bb9, 0xa7, 0x4, 0x8001, 0x3f, 0x1, 0xfff, 0x5, 0x6, 0x3, 0xffffffff00000001, 0x1, 0x10001, 0x5, 0x7, 0x647466c5, 0x1, 0x10000, 0xd, 0x401, 0x950, 0x5, 0x15621fca, 0x7, 0x3, 0x5, 0xffffffffffff8001, 0x1, 0x6, 0xc00000000, 0xa875, 0x67, 0x9, 0x3, 0x0, 0x9, 0x5, 0x3ff, 0x2460, 0x5, 0x1ff, 0x3, 0xffffffff, 0x5, 0xfff, 0x5, 0x6, 0x8, 0x3, 0xf4b, 0x2, 0x8, 0x5, 0xfffffffffffeffff, 0x55f, 0x4, 0x9, 0x5, 0x100000001, 0x44f, 0x1fffe000, 0x2, 0x1, 0x7f, 0x800, 0xa0db, 0x9, 0x8000, 0xfffffffffffffffa, 0x8, 0x6, 0x0, 0x2, 0x5, 0x401, 0x8, 0x1, 0x36f, 0x8, 0x5, 0x8bc6, 0x400, 0x7, 0x0, 0x0, 0xfffffffffffff3e4, 0x2, 0x3ff, 0x1000, 0x9, 0xc707, 0x8000, 0x80000001, 0x0, 0x77, 0xfff, 0x8001, 0x8, 0x1, 0x0, 0x8, 0x6, 0x4fd6, 0x6, 0x401, 0x8, 0x7, 0xc1, 0x0, 0x2, 0x5, 0x7, 0x1f, 0x9, 0x101, 0x8, 0xaf71, 0x8, 0x284f, 0x4, 0x10000, 0x80000000, 0x3, 0x47, 0x2, 0x8, 0x1, 0x1, 0x8e, 0x2, 0x80000001, 0x2, 0xffffffffffffffc0, 0x5, 0x5, 0x8], 0x8, [{[0x5, 0x100], @multicast2}, {[0x8, 0x1], @dev={0xac, 0x14, 0x14, 0x11}}, {[0xff, 0xffffffffffff868b], @local}, {[0x7f, 0x2], @local}, {[0x81, 0x7724ecf1], @rand_addr=0x1}, {[0x9, 0x6], @rand_addr=0x8}, {[0x8, 0x3], @local}, {[0x589, 0xfffffffffffffff9], @multicast2}]}}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x200, 0x1, 0xa7}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"2f63e14fbad36c483fda395326f2cb4f44998cd59d40e00ad57a6cc5501a"}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x3, 0x41, 0x9200, 'syzkaller0\x00', 'gretap0\x00', 'bridge0\x00', '\x00', @dev={[], 0x19}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="068593449cbb", [0x83f4ea7a8356d231, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}, {{{0x0, 0x0, 0x891f, 'bridge_slave_0\x00', 'tunl0\x00', 'teql0\x00', 'sit0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xe0, 0x260, 0x2d8, [@stp={'stp\x00', 0x48, {{0x3f, {0x7, 0x101, 0x5, @random="f113d78f8313", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x3f, 0x7, 0x8001, 0xffffffffffffff9a, @random="8d10d53ca605", [0xff, 0xff, 0x0, 0xff], 0x4e21, 0x4e21, 0x1, 0x0, 0x8, 0x1ff, 0x1, 0x8, 0x3, 0xffffffffffffb22e}, 0x20, 0x800}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:systemd_unit_file_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00', 0x8}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0xfffffffffffffffb, 0xfffffffffffff90f, 0x18e, 0x0, 0x0, "5c7e064ee2f69d42e601a1e9fe8c1e104150c279a8f59e96d51205ee12f0f0eba429a910e58060fc9e30365bf286cda0c13ce4359ffcffd2d6726dff30871ad5"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x11, 0x2, 0x8137, 'ip6tnl0\x00', 'bcsh0\x00', 'ifb0\x00', 'bond_slave_0\x00', @random="7b80fd162a57", [0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf0, 0xf0, 0x138, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x0, 0x1}}}, @time={'time\x00', 0x18, {{0x76b5, 0x5, 0x95f7, 0x3680, 0x6, 0x0, 0x2}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x9, 0x7fff, 0xfc000000000}}}}, {{{0x0, 0x10, 0xe8ff, 'veth0_to_bridge\x00', 'bridge0\x00', 'bcsf0\x00', 'bridge0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff], 0x978, 0x9f8, 0xa30, [@among={'among\x00', 0x8b0, {{0x7f, 0x99, 0x0, {[0x7fff, 0x7, 0x1, 0x2, 0x2, 0x4c, 0x7f, 0xfffffffffffffeff, 0x9, 0x4, 0x0, 0x90, 0x992, 0xccb0, 0x97fb, 0x9, 0x7, 0x0, 0x1, 0x2, 0xfffffffffffffffa, 0x8001, 0x8001, 0x4, 0x0, 0x80000001, 0x3, 0x1, 0x8, 0x3a94, 0x2, 0x10000, 0x1f702d89, 0x8, 0x100000001, 0x7, 0x0, 0x3, 0x7, 0x2, 0x7, 0x8, 0xe548, 0xa6, 0x0, 0x1e, 0x5ff, 0x9, 0x0, 0x79, 0x7fff, 0x3, 0x2924, 0x0, 0x2d5, 0x7, 0x336, 0x7, 0x7, 0x10000, 0x4, 0x200, 0x5, 0x2, 0x6, 0x5, 0x7fffffff, 0x7fffffff, 0xef6, 0x4, 0xffffffffffffff81, 0x100, 0x100000001, 0x5, 0x3ff, 0x80000001, 0x1, 0x4, 0x89f, 0xffffffff80000001, 0x519e, 0x3, 0x7, 0x2, 0xff, 0x5, 0x4, 0x3a7f, 0x8000000, 0x6, 0x74, 0x2, 0x5, 0xffffffffffffff6b, 0x3a, 0x7, 0x0, 0x8, 0x3f, 0x4, 0xfffffffffffff3d8, 0x10001, 0x2, 0xfffffffffffffffb, 0x9, 0x9, 0x8000, 0x5, 0x5, 0xfb, 0x6b, 0x8001, 0x4, 0x7, 0xc8b, 0x0, 0x0, 0x5, 0x10001, 0x5, 0x4, 0x4, 0x7, 0xfffffffffffffffa, 0x40, 0x5, 0x7, 0xebe3, 0x7, 0x4, 0x7, 0x8c, 0x3, 0x101, 0x1, 0x1, 0xff, 0x8, 0x0, 0x7, 0x8, 0x3fffffff8000000, 0x4, 0x2, 0x5, 0x6, 0x221, 0x2, 0x2, 0x1, 0x1ff, 0x3, 0x6, 0x5, 0x20, 0x5086, 0x4, 0xd, 0x1c9099e0, 0xffffffff, 0x610a, 0x0, 0x626ae196, 0x8, 0x2, 0x6, 0x5, 0xe948, 0xaa3b, 0x9, 0xfffffffffffffff8, 0x1f, 0x1, 0x1, 0x1, 0x1, 0x80, 0x4, 0x1, 0x30a, 0x1000, 0x4, 0x4, 0x98, 0x0, 0x0, 0x3, 0x874, 0x9, 0x9, 0x0, 0x8, 0x2, 0x10001, 0x100, 0x1, 0x8, 0x7f, 0xf4c, 0x3, 0x2, 0x9, 0x7, 0x1, 0x4, 0x585, 0x61a, 0x20, 0x8c0a, 0x3, 0xffff, 0x9, 0x4, 0x5, 0x80, 0x2, 0x1f79, 0x3f, 0x43, 0x7fffffff, 0x71c0, 0x0, 0x8, 0x7, 0xfffffffffffffff9, 0x0, 0x8, 0xe7d, 0x6, 0x3f, 0x5, 0x6, 0x7, 0x0, 0x100, 0x4, 0xf9, 0xfffffffffffffff9, 0x4, 0x0, 0x797, 0x1, 0xfffffffffffffffd, 0x3f, 0x3, 0x9, 0x7cbd, 0x1, 0x81, 0x0, 0x4, 0x55ab, 0x1, 0x10001, 0x2, 0x8001, 0x3], 0x3, [{[0x5d2a, 0x1], @multicast1}, {[0xba9, 0xd1], @multicast2}, {[0x5, 0x7], @local}]}, {[0x4, 0x9, 0x1, 0x593f, 0x1, 0x6, 0xfffffffffffffeff, 0xfffffffffffffffc, 0x5, 0x4, 0xbb, 0x6b, 0xd8, 0xff, 0x1000, 0xf4, 0xed, 0x1, 0x899, 0x40, 0x20, 0x4, 0x8, 0x4, 0x7fb, 0x7f, 0x3, 0x2000, 0x9, 0x8000, 0xec, 0xfffffffffffffbf5, 0xffe, 0x0, 0x5, 0x7ff, 0xbec, 0x0, 0x3, 0x8000, 0x2, 0xffffffff, 0x7d6, 0x4, 0x8, 0x78e, 0x1f, 0x7, 0x3, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x7, 0x65, 0xffffffffffffffe1, 0x10001, 0x7, 0x2, 0x7, 0x4, 0x5, 0x3ffc000000000, 0x5, 0x0, 0x5c143b2, 0xffffffff, 0x5, 0x1, 0x9, 0x3, 0x1b0, 0x80, 0xfffffffffffffff8, 0x401, 0x7, 0x7fffffff, 0x1, 0x7, 0x7fffffff, 0x10001, 0x3, 0x49c3, 0x7, 0x9, 0x800, 0x1, 0x6, 0x7ff, 0xfff, 0x4b3000, 0x100000000, 0x3, 0xffffffffffffff00, 0xffffffffff89529b, 0x7, 0x2, 0x800, 0x8, 0xce, 0x7fff, 0x5, 0x3, 0x1, 0x3, 0xffffffffffffffff, 0x2, 0x4, 0x7fff, 0x2, 0x1, 0x0, 0x400000000000, 0x5, 0x8, 0x800, 0xd763, 0x3, 0x0, 0x8, 0xec2, 0x8, 0x0, 0x1, 0x800, 0x7, 0x3, 0x5, 0xb1, 0x4, 0x3ff, 0x7ff, 0x6, 0x3, 0x8001, 0x6, 0x9, 0x0, 0x4386, 0x7fffffff, 0x8baa, 0x7f, 0xffffffffffff8000, 0x8, 0x8000, 0x3, 0x4083ab57, 0xb9, 0x71, 0xe5e0, 0x9, 0x0, 0x69, 0x6, 0x2, 0xc3, 0x2a87, 0x800, 0x3, 0x7fff, 0x2, 0x100000001, 0x9, 0x7, 0x35c, 0x6c9, 0xfffffffffffffffe, 0x400, 0x0, 0x3, 0x5, 0xffffffff, 0x10000, 0x9, 0x4, 0x7, 0x5, 0x6, 0x0, 0x3f, 0xff, 0xd7c6, 0x2, 0x2, 0x9, 0x3, 0x5, 0xa160, 0x100000000, 0x80000001, 0x2, 0x2, 0x1, 0x8, 0xffff, 0x7fff, 0x8d7, 0x1, 0x3, 0xff, 0x913e, 0xfffffffffffffffd, 0x5, 0x99, 0x0, 0x8000, 0x5, 0x8, 0x4, 0xfffffffffffffffe, 0x471b, 0xfffffffffffffbff, 0x1f, 0x200, 0x8, 0x9, 0x4, 0xffffffffffffffff, 0x5, 0x5, 0x856, 0xd5ab, 0x100, 0x2, 0xfffffffffffffff7, 0x4, 0x7, 0x2, 0x1000, 0x8, 0x7f, 0x8, 0x32, 0xff, 0x2, 0x9, 0x4, 0x3, 0x9fe2, 0xd58, 0x101, 0x7, 0x1ff, 0x3f, 0x9, 0x3ff, 0x100000000, 0x7, 0x3f, 0xfc98, 0x101, 0x952, 0x100000001, 0x8, 0x800, 0x2], 0x9, [{[0xffffffff, 0x1], @multicast1}, {[0x0, 0x6], @empty}, {[0x7fff, 0x40], @multicast2}, {[0x800, 0x9], @loopback}, {[0x1, 0x8000], @multicast2}, {[0xffff, 0x7], @loopback}, {[0x1f, 0x7fff], @broadcast}, {[0x2, 0x20000000], @rand_addr=0xc000000000000000}, {[0x6cee, 0x8], @loopback}]}}}}, @vlan={'vlan\x00', 0x8, {{0x4, 0x6, 0x9100, 0x0, 0x2}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@log={'log\x00', 0x28, {{0xa0462b, "9555e75f9f0d0aae817fef7b1e8c02f91bf0b45caa38b21bc7524362de17", 0x1}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}]}]}, 0x19d0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 2651.818847] binder: 647:655 got reply transaction with no transaction stack [ 2651.840390] binder: BINDER_SET_CONTEXT_MGR already set [ 2651.849746] binder: 656:658 ioctl 40046207 0 returned -16 [ 2651.850544] binder: 647:655 transaction failed 29201/-71, size 0-0 line 2741 13:44:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)=0x7) [ 2651.924553] binder: BINDER_SET_CONTEXT_MGR already set [ 2651.948104] binder: 665:667 ioctl 40046207 0 returned -16 [ 2651.952841] binder: undelivered TRANSACTION_ERROR: 29201 [ 2651.967809] binder: 665:667 ioctl c0a85320 20000080 returned -22 13:44:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x7a, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup3(r0, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000140)=0x54) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0x0, 0x2, 0x1f, 0xa9, "aa26a3bf56620f4dff4d1c36d80ae83dae13d5036037ff6a83c48164887b632cc3a74ed12f6982949b740dedc16c27f782f5b0878b82d933753505924c753d592c76a0bc999eda6a812efd2e6ed25ffad3c651de0b43ea39d5b6963e04aaee619a06402fd2c28124a1f6bf5f626e232c3787d942390fbb36ca68766472f1f10a28ddc5b7d8c3fa7637743bd72f9b10ecc5335d6106d2aedf284d1992f189008aebd2868bb0b6434f19"}, 0xb5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x9, 0xfffffffffffff800, "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", 0xf4, 0x7, 0x9, 0x200, 0x10000, 0x80000000}, r2}}, 0x120) r3 = dup(r0) r4 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x81, 0x1}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000600)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0xc981fd24) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={r6, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x3}}, 0x3, 0x5}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e20, 0x12000000000000, @local}}, 0x59, 0x1}, &(0x7f00000005c0)=0x90) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000040)={0x8000, "c24ee47a194b9a4fb1704e084baa154dcaa3c90ca4fcbddf87cf9cfd15f8c020", 0x3, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) 13:44:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20800000008912, &(0x7f0000000000)="0a5c2d029e0000000000000074be7eb80dbb7740000000aa4402d58b837a709dd3b3c6f1e2f709ad97a4b8406acfb5efeb5aae959839b4f943f3b0e3ec723244b3e58e15e4b0000000000000000000") unshare(0x400) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x1001, 0x400) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x8, 0x3, 0x9d6, 0x0, 0x6, 0x100000, 0xf000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) r5 = geteuid() fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r5, r6) 13:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x96f5) [ 2652.519745] binder: 676:677 ioctl 40345410 20000000 returned -22 [ 2652.528126] binder: 679:684 got reply transaction with no transaction stack [ 2652.536477] binder: 676:677 ioctl c0345642 20000040 returned -22 [ 2652.543033] binder: 679:684 transaction failed 29201/-71, size 0-0 line 2741 [ 2652.593708] binder: undelivered TRANSACTION_ERROR: 29201 13:44:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x74000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x80) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x7f, 0xfa1d, 0xfffffffffffffffc, [], &(0x7f0000000040)=0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2652.648676] binder: 688:692 ioctl 4008700e 96f5 returned -22 13:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2652.715445] binder: BINDER_SET_CONTEXT_MGR already set [ 2652.753223] binder: 695:701 ioctl 40046207 0 returned -16 [ 2652.769672] binder: 695:701 got reply transaction with no transaction stack [ 2652.788244] binder: 695:701 transaction failed 29201/-71, size 0-0 line 2741 13:44:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xffffff7f, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xc0000, 0x1f, 0x7}) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x25c, 0x1, 0x5, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x8}, [@typed={0x4, 0x5f}, @generic="c5edbb48001b12c2ffde4e1bfc0ce8339b8dec43f6919df7a57a157012907a7d477c7c7695d1815fb78b0cca437c00f2e8bce1540f6e65fdfd339c309b19ace70d750af930815aab73e233dc7c9acaddab0553e25d48284ff3408cd816697ff6854debac9647f462aebde7ea8f34f38f4d5be8568da7cf1bdcb0aea6b8cad371ea5aeb731f5892a09ded0036e2cd85de0e1e92059d4b9f54069c2a3f153d4f46a765188200e229d5932595c93b08968306ad8f2cefe67796", @nested={0x8c, 0x56, [@typed={0x78, 0x7a, @binary="38b432eefc8328cf88e749d253e46f1d5f9b3ca407b5a829507a4dca5d167911074b307f2bfff7f1219094fd9841c88c458192c755cc77a5dae30f30ac7f0d71eb38e7f09b18fe130fab040ef59037e97bfa085707bc60390fbcac2adb38de70507eb78d91c01bff88c1effe784204540264ae"}, @typed={0x8, 0x36, @ipv4=@local}, @typed={0x8, 0x13, @fd=r0}]}, @nested={0x84, 0xff, [@generic="899d1850db853723c087da422bb182fc04b94a704f78961c56a5f59ff64e1996d6b4c55c2f786288faac15f037a929b6ff025a50f90209910c3c18c576e8d65bba4ed0bd54528b2c67f66ce8196833df59d18ffeea50593734c0872dcd7d244e05", @generic="ddf4f6baf710da42aaee3316099b44f802d824a1649dccd24f07712f8d"]}, @nested={0x7c, 0xe, [@generic="9b29cd02545a44e8a541c228c3566e8ab2ea97e3ae98895f45362bd6270360abb45a2fa9960fa361390b1960dc3b25f34923245b9dab35dc44d4588021fb8f85cf531ba3de8936", @generic="7893f8542d6eb2d886a6bab8f316", @generic="6be1e5e1a263318d7132e192abc96f9a1b79c88a72366d993087bccbaa56f98097ccf6"]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004080) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2652.816822] binder: undelivered TRANSACTION_ERROR: 29201 [ 2652.847231] binder: 713:714 got reply transaction with no transaction stack [ 2652.867682] binder: BINDER_SET_CONTEXT_MGR already set [ 2652.876254] binder: 715:716 ioctl 40046207 0 returned -16 [ 2652.878098] binder: 713:714 transaction failed 29201/-71, size 0-0 line 2741 [ 2652.891203] binder: 715:716 ioctl c0185879 20000000 returned -22 [ 2652.926144] binder: undelivered TRANSACTION_ERROR: 29201 13:44:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:24 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0xb23e, 0x2, 0x200, 0x0, 0x0, [], [], [], 0xff, 0x62a}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xd6, 0xff}, {0x1, 0x100000000}]}) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r1) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x3000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2653.353588] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.360714] binder: 725:728 ioctl 40046207 0 returned -16 [ 2653.367909] binder_thread_write: 5 callbacks suppressed [ 2653.367924] binder: 724:726 DecRefs 0 refcount change on invalid ref 50331648 ret -22 13:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0xb2, [0x1, 0x8, 0x3, 0x0, 0x20, 0x8001, 0x0, 0x80000000, 0x3, 0x100000001, 0x4567, 0x800000000000000, 0x7, 0x3, 0x6000, 0x22, 0x60000000000, 0x6, 0x4, 0x1, 0x8001, 0xcf, 0x1, 0x2, 0x7f, 0x9, 0x80000001, 0x401, 0xfffffffffffffe01, 0x0, 0xbde, 0x1, 0xffffffffffff4fbd, 0x3, 0x100000000, 0x1f, 0x7f, 0x7, 0x4, 0x5, 0xffffffffffffff3a, 0x600000, 0x6, 0x8, 0x6, 0x2528, 0x40, 0x4], 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2653.407094] binder: 724:726 got reply transaction with no transaction stack [ 2653.416092] binder: 724:726 transaction failed 29201/-71, size 0-0 line 2741 13:44:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2653.462716] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.474040] binder: 734:735 ioctl 40046207 0 returned -16 [ 2653.488524] binder: 734:735 ioctl c0745645 20000000 returned -22 [ 2653.494514] binder: undelivered TRANSACTION_ERROR: 29201 13:44:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x100) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x1) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000280)="253aa46c7d8ba3330f43d9a5844ff3f97e9dc33190c917eea5bc6f927b1b1683cee65958b334492f7a8f371cb2c51e3d49514812c4eb9c162cf35fee3ed6c8964022f2ae8cd1b0b5447f8c882f2aac21db96899d25f40059a601484a488d", 0x5e) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x0, 0x81) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4800, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000200)={0x798d, 0x24000000000, 0x80}) 13:44:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cpuset\x00') ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000000c0)={0x7f, {0x5, 0x7ff}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x0, 0xa, &(0x7f0000000100)='mime_type\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x0, 0x990, r5, 0x6, r6, 0xffffffff80000001, 0x20c, 0x7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x10001, 0xff, 0x7, 0x9, 0x5, 0x4, 0x0, 0x7ff, 0x3, 0xc6, 0x4, 0x6, 0x0, 0x7f]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e24, @multicast2}}, 0xd9bc, 0x8, 0x3, 0x9, 0x400}, &(0x7f0000000480)=0x98) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x408000, 0x0) 13:44:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x4800, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x140, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000000040)="0d5f555132c602e5d123211dd3cffd7b65c867e66a2a0b197e1932f7d17cdbf0d6251b07e8e3a065b54c83bb5a58e967360ff6cbb3503b1be4efe1e17929e8a180ed8b1d21b69e22", 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 13:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1ff, 0x8000) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x7) r2 = dup(r0) r3 = epoll_create1(0x0) r4 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110, r4, 0x0) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000012c0)={0xd4, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="066304400200000000634040030000000000000000000000000000000000000001000000000000000000000000000000000000002800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="780000000000000020558a05c2000000200000000000000048000000000000003800f31a4fac00008da9914a8a02cae85a384e9cae"], @ANYBLOB="030000add87193408afbed58a3b4040f4a0e024e96c3b44e7f61705a8c3dac04f1260c8e8cc3558ccbfc6ffdbef3611759ec7720d07e7e305d47f5f110a9e616d082ba3d12ed5d2886bcc3c499371c4f38f58fc15b65ebe8235ea6f4bd6a55af76e14dffc1af15a611208f6d9f7dbb11da5d1a8ce2d0621068ea2eb1d87dd6df6946d83ba9c2039ddb83c9f5890fbe18f90fe2e144b1ad2d7c5ebb4a11b6f867c1fd5d9e6ddf85efb8cf42299798ef6ee8a5b3f67a03d55962", @ANYRES64=r7, @ANYBLOB="1063084004000000000000000e630c400200000003000000000000000c63000001634040020000000000000000000000000000000000000001000000000000000000000048000000000000001000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="0000b28e0400000000000000852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000300000000000000852a6a7301000000", @ANYRES64=r8, @ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="08631040", @ANYRES64=r9, @ANYBLOB="0100000000000000"], 0x1000, 0x0, &(0x7f00000002c0)="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"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) [ 2653.605277] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.613376] binder: 745:746 ioctl 40046207 0 returned -16 [ 2653.627611] binder: 745:746 DecRefs 0 refcount change on invalid ref 18432 ret -22 [ 2653.647980] binder: 745:746 got reply transaction with no transaction stack [ 2653.668597] binder: 745:746 transaction failed 29201/-71, size 0-0 line 2741 13:44:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9a, 0x101) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2653.709616] binder: 757:758 Release 1 refcount change on invalid ref 2 ret -22 [ 2653.717749] binder: 757:758 got transaction to invalid handle [ 2653.730435] binder: 757:758 transaction failed 29201/-22, size 0-40 line 2834 [ 2653.738634] binder: undelivered TRANSACTION_ERROR: 29201 13:44:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x7400, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = dup(r0) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd8c9) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0xffffffffffffff8c, "3d163b031c8a16f9f30da67923d9c64c8919ec0f5a403b6260f6ddccb06dee5dc90dda42a6886cc4132867dd0d4898454e4f0584b123885dd33b53b521a2088df550c641350a8bbc59fc64070a8b0242"}, &(0x7f0000000080)=0x74) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0xa, @win={{0x71ab, 0x6, 0x8, 0x5}, 0x4, 0x2, &(0x7f0000000100)={{0x3, 0x6, 0x7, 0x9}, &(0x7f00000000c0)={{0x8, 0x360, 0x7, 0x8}, &(0x7f0000000040)={{0x40, 0x4, 0x395ace63, 0x8001}}}}, 0xffffffff, &(0x7f0000000140)="7a16ef39bf07b2d51c1e9daed1a4901c40d4fc9619c9ca8f4d86a059ae05f0c4947cbb180476b0fb8efa9829e3fd78c48bc84343facbe37c71302d223cd64b9519d74c3987c8e3cf2b0cceecdfc0e471ae911952393f656c8423d610a9ef1c2159e0d569e7458332aec5dff95286971619fa43a4c3726358034ecad473617203ae6eb626e7ecaae678d6021f8b310b19488557edcd5442ea3773a6ff3d4f9d773fc755b761c305588b053fad0c812ec1d5e188e1e9643e16ba43097b3897f0922cf847c31665d5", 0x80}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2654.182814] binder: BINDER_SET_CONTEXT_MGR already set [ 2654.190395] binder: 770:771 ioctl 8912 d8c9 returned -22 [ 2654.199766] binder: 768:772 ioctl 40046207 0 returned -16 [ 2654.212659] binder: BINDER_SET_CONTEXT_MGR already set 13:44:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) epoll_create1(0x80000) [ 2654.228326] binder: 768:772 DecRefs 0 refcount change on invalid ref 29696 ret -22 [ 2654.236757] binder: 770:771 ioctl 40046207 0 returned -16 [ 2654.242662] binder: 768:772 got reply transaction with no transaction stack [ 2654.250172] binder: 770:777 ioctl 8912 d8c9 returned -22 [ 2654.250497] binder: 768:772 transaction failed 29201/-71, size 0-0 line 2741 [ 2654.299933] binder: undelivered TRANSACTION_ERROR: 29201 13:44:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x2, 0x0) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003680)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000036c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000037c0)=0xe8) r9 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003840)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000003800)='\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003880)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000003980)=0xe8) r12 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003a00)={0x0, r1, 0x0, 0xa, &(0x7f00000039c0)='cgrouplo+\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003a40)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000003b40)=0xe8) getgroups(0x4, &(0x7f0000003b80)=[0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) r16 = getpgrp(0x0) r17 = getuid() stat(&(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003c80)={0x0}, &(0x7f0000003cc0)=0xc) r20 = geteuid() lstat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003e00)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000003dc0)='/dev/binder#\x00'}, 0x30) getresuid(&(0x7f0000003e40)=0x0, &(0x7f0000003e80), &(0x7f0000003ec0)) getgroups(0x6, &(0x7f0000003f00)=[0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) sendmsg$netlink(r1, &(0x7f0000004080)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)=[{&(0x7f0000000040)={0xd8, 0x27, 0x20, 0x70bd28, 0x25dfdbff, "", [@generic="aad6a6e128f8f17495fb738aa437de05dd1c6d790f7744d976b35656c1b990f48a88adf29b116406f8030bc18d6d40f3bb7118fc6b8af8b2bd2d0131cf0a6c0db58cf41d972adf950165aa207433fa02a4b03ffb262302d16a851ba438426c9d673fa4d84331c5e9254f716530ea1df0f7961374cc8f8d697f7c2895917ab958c0057815fdb06916559a04906c97390211531c35f9d894c3cab224da53ce106eebc8247c1e1379a5ad5d158cfc239036a212af4be60bb15e92ec383643dc69fa7645880ae99e7b"]}, 0xd8}, {&(0x7f00000001c0)={0x58, 0x26, 0x1, 0x70bd26, 0x25dfdbfd, "", [@nested={0x48, 0x23, [@typed={0x8, 0x42, @pid=r5}, @generic="a8cc8134c1744183c1a731d883df24440892f0f2def05835925911f783bccebdad5f9710a766b3c21c664dd1c48ee957fd", @typed={0x8, 0x2a, @str='\x00'}]}]}, 0x58}, {&(0x7f0000000380)={0x3278, 0x2a, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="1d951daea65be6cdf0110c66e4e9a1dee38cebfbc7f118cb58633c905db31c881f28d5f21f4dca9d5e8f313fa9d0b93fd19596446fbaf986bc77d443dda2231d7c7cf1793e73b31312c68802b2277b31b5957498dab0dc4de4fb", @generic="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", @typed={0x4, 0x41}, @nested={0x2208, 0x73, [@generic="d221f9c7f511cb5f931d8ece6fdb4d24c67abc5cb18923dd4e04827e50af1b61129e2f1ee3ba6d6d4b9b9b12a9471cabf86e82c2e7790870a90fb660c155682d69a31edf7685", @generic="923778b4e451c9f640e5f4ce7f401b5ea3150760748c1c2ba3db5f836ddca469a8966e58d9a10909a2bdadfd75b8a31c44f0eb98ba4c5756ab8b1d145a08ca01f2c4a9c86306aaa364b3638f48a2da9ec9f13a4d8b84d96024fa3b2e2ca271a6cde0f67878cf0194e6aded48ac7d01c528f3bb7058b45dfc0403429c8aca3a902523929d6fab08107d0dc27575c30109a537546a3a40b5050fa01a6afbd0c231226cda35c74c40ca9c2c59f1f390e41281fab36ebd8b5ec1c456c0b5d2b93cb1c6bcd8fced2227870bd9cfd9434b542264a60d084b5fa10d132f401f9311c10b0cf1d80d4cfdbde2c05f593585cf16c2bb776a8708f8506834c616f550b1c895d5fb924454ccc4373a7e9bc11067cc58cd3b1b197bac96a8a18f553a791c8b886d589728a2ff16f55ae201647c06d8cdc6d3ae8cebee7edf5db55064f80cb76c637715d50692a05a70dfe0d21e77e3d9bbe22249ebd1bfd517691fc65d77c6ca81ec94b9a8d20d3b37704c814d14c122318e359e8f7917b3cf8b157c6a010adf5fb1a1dbb482fcc61d186e66cdfeabba897b4717975c6b945e0eb53cd022a7453d7f73310818c72ce6918ac42c28123374ab925e7803ccbf4dc7c2132e3c8d6b7f09178995a027443178eb8237d1d67047690d5c728042de112c55c1815771fd7b229c02066b294aa73d3954621ffbadc69bea9be691b24e5dfd77deb453789e435d66a88a285dd46ba79d51370b0c7e3f619cabe19b9ee5300273ac8c70faeae79babf6669f731065fe40de5d576b900beba946430312b42479c6bcd2e9517369d87df6a997e7ec62209dc96d68b5c622c4396b3e33fb4379505665bff26d76103397069bb5c700bb0b389e0678d569e0884d0946c4fdb01696f3ba5ef17d6ab99fe70f409882b9717c888b350e1e4fcf4a495c280bd8a7513b2cc96f98009e7e3243aa1d41ffd047c19efddeabc1713777ccfeb5e279eb2622bfb7669ecedf136b230a2d7998b26d3b0f6e903002b65e3a7a703ef39c2b477415764d7162fb94da077d077b90c0ebd3a1cb8483601734cf8dd743bc7039eac2a7352425511e19a1d1b2e7265b4f7ab7ee6a6e9966fa99f7cb2434e9e9212b2c5c6f0a74bdd33a185e89cd0822aabfffdbb7f8e0925e90f4a4f65608ac8640a51dd3f01f627881e3f9f54300e6d2147dae4c8ce8ab0debd36085eff9ff1cb37915ee7a36fe8bc2b5088e37036b36c1141166cd8c4a3ab12c4d12b3315e698f1046b2bb920142c277b0ef085cb9589318fa70c036bf433e682cd3febe78df6ec2e18197ec7a82c6e41f50eec8664987320d4b415271bb80a17c2f7cdc17163a6687fb74a475425dcc3074d0c31db15c73a30dcb28c1ff6e4909b283442d683d82b779709a10616800162ef23ab9ba43b5dae375f92ceb76dbf19ed9730feecfa10f71ed2cc89e96a80195f00be956cb7586d45d3658c6c9acff4ab6b3e5a9163dca1da7fc04e503b08161c45b2d1a9a17ae9341e1e4043d4774d00910e734d615c15d0e6ade0e812cf7ab62805254c379fa80f3eccd28146c7edf86f64f43cf8b5b639f0587ef6a527ceaae4cce6bc350ca4df987b43eed5e60e929d6e89b3935c19ed6c77632d65d23b4b22642c467cfefa40926230c2e6cbdf4f31a11ded159d5cc5a12aa291cbb5fd56ae5abdbff0b8b4fe94db39c46004f5d84ea0cdf9ade98cd3daec881ee17a817e444dcd32272058e744a0e55cbabd57639ce733347502d01fe48937b9e5559494b06fd9ee5c60ded888ee9dfabb15d3e39cbe20bf6707f497b7597ab1eba860ee0d94456b06d9eee1dae9d001563a6b77769f70f798b2ded722b166b31edb62dc34f6652e426ac5b4eaab263207d21bf546187758eaf8dfb05a3dd78de44c57c4c9ad0d30778e045e06f8112dd0e043b67d2ba3d176bae1ea5440ae7c9e51e6505e245c9fbbdf6cafc05ff20e63577b0d3976dfa9720c0d5c2b65aef564be82ef14c81a89b15ecb97f692606267a5379bc5fad826a84a3dfc36b9fa5ef276101f4d9ed265b80a561b5061f96fc7c414ecf6a025e5415f90685e8d975524e8e8760ef21cdf3ac45655988e87aae3b2a5b4943ad6ce46825c021768dd1cd7c9aded3f326074b42c1ee38be8cd1e3cb285707c4e66c60c647a5da0210b0c4cb024b06a0146a3e04bbc09cec30174c9ae903eaf8f07ebd3869139392f1fbcc45d8777a941b53831c98f816332b84b53a9f3a72f1b7a4d59ca01df65e0b1a6436ab13f90d1cca2b699202f4318f5454d0e29eef5b899f7417eacd72a90d18badfa4f446512985b39d3f0b55fd0bd393c92fd519eb8c5c07c6db9ec601ea03d167963b0c01b2071146b401b6a6bb9737cb1cf13ed88058bd5c72fb235d77a8331e25b6f90fb471fc640497cb9094b3116e06e8f7431dbcb2b7e344673cf589e87967ef9a9ed5c5ae1e63f38e3927c6d4b337b75e498b5b03b44a1b2dcfbabfd7d1efdd828b07153cd30c2ee74482bb3d8b708ef9e5d1f760210f1b00e3e7a88d42a1923db29fe578ec1531f38e9f56b014298636137fae48d6d1f96e656e1e2ff4b2cd47c7cc12f1c2c7de5ea2e8bca6a2bc1246eec762a4b11e9741aaafcada0e83eb4170909c6ae38a28abe03eb7ccc175e5dedc19133baab30d788bddad0edadec37734b2390d1305077c0fa9237c61961b5e3d61a210e18bb1376b693cc149f6f324803e7182b3212a4879650a80f227ea9d937640b79f41b9a5931f9adbfc47688c0eab87d09ea2536ba56f55b737598d88b34dcbdcaa82aadcd6775e9930d30cca3d0d197aa882e04a665ddcbe5f293b8608986de66ff325a9e8287d11bce12903dff22670f06ec98553d6e1392b4aac3c300e719adfb3d09a86e972e29f8c6467e60b2d780682c4211f79e425ce9170fc3f11f3fb71f39a19cc03f1a53f9b8a7558e0735a8d3c2b8157df1c5a5a50fc11f534b07b1682e854eb73b638418090056df513a5659f5756ce7b929502658ab027dcf163b289642abc910282ce0d7c85f3465717f76a50faa8a32a48f7dec9bb67b26f727727989a6d0a756854d911b07991e4bfa8daa2e562f01e76618468e5db24140d22d018885393c9412c0621f8b95ea1aa49a136eb34e7746abe9a37c415ae209fba6c14fd79bd2a355b2ba0deb23901691bb6d7a7e7aa0a27c805edf8579915df554648e234692f44559b353c3810a9b39a70aacc65805f492dae1f028337b083e3eb9226fdfc0a005fe144bbf1a20ad59f777f602f3afbe0e98884a885a3bee55b4bea0116a9615d8cbe2c0ed205bf115e6481d44092d8a5dcf6f9d300b3e428a4a969fb3c16b7ed4937d387190a708488456a2dd7a6b141a8d07a76d6645635b480a03a3d7609d53695a33d4f0d54de79e37cf3c9134116ab54438f05a28f2de9f0d8b568c7d21efbc52591887aa4313956853a8329b11725661fff78dc3596de401b4c942cca2cf94cc5d875788ff7984b7cf8c60a608ab612e5fd11cc994c5e571ac2c9e2f64e4882126b764fbc33a4c2e824a69c398bcb768add3f5449e2f4cdee4310236b541ebc2a6d36c81cc801808fc1473fea216b3f38c9b379c749f554163debff5c5b91963a2eae0b074e263657379653b3415aec6af808bc7eb558495355d88dd32cb4f553c2b69e1d67673c95505ff367c186c74535a640eb2f05840e6afcbea4948606fad9c62723d4966e2ebdd11e50e238f57404958aa4503758dff1174a8951ce0d38618203dd5cb779a2bfb3229cd867a692e24f4209c6d114fd48f6bbb880b235ca9c7078fc1c6a14722f9585212d6ff7d61bc538f5bab421ab70ae3962f398b66c8cf48b819b353596e9c827c2cc9284fcedb567dc4181fd753989c98d2e983297d84468e491b6ae51c265f32bed2d123e791ee5c1345a3d5c562e1c058e64dd26036f2414f2bc96b351332f9accd987a105914bd63e991908e255118116288d38f227552411eb2c3f4a255f6a1bf5c95a4fdcceaac2ba3a33d0f4c0880e6dfacb1c3109259a6c30f03affe2b59b32a1edaa5bcb7e73adaf1ecaba8e38bd5dbc047d4550f4859faf5074eb5b08d142a5087e1076aa06c028952cb9dc1eafc47cb165a6a06044c7b7b90f2b122b72da52b6bd0440e838a8a27bb869157f289693b565e70f54672b52e83edbcf609577ac09cb4f54a0a1c6d30faf464d726b64427ff02635bd7eff1f4f8216607a0bc3132c42f14bc0361cd66fd460d1fdf86235c24cfa0a455525fdf03f4dcbdf3883dcc29d7ad396cd828f64ba89381126b252a3c6f4c217fa8adf78e07fe0342af484dc9edfa5baf233d8e3487efd5c94199e60177e21426e891612cfedb59c37290e8a49bfc1a1826805ee082d1baeb39d0834d09f99014f85a35eda6c2d4c5485f8d80a717bec1a675a73015e6a37d4585c0f247277947ff33c71660aa4b0a3fc9586b8f70d9aead9b5ed3c7347b79a677dd4b68918c5d03d175f2b7f6d1e799c2e75ba212455b98d1a0c919cfe3edf682d156c5b21a750753df2daacd1d706f0dbc85ca5d23e59ec3abce5fd7f63e79c7185d0f272283710f591e1ce962fab61d847157acb85f5d6df1066cda0b24919fb74af46cea778b0be9623f6fca9649ff418118f03d0166a2346e7fb054c916e4e78321577f000e2f4bffa3fab65811e896e68feea7ccc1c35502719e2d4cde16011d12a6140f027c9c2ab6f40caef18168c157e5a62c46bff509b987ae4346ac1e6cfb2a3525831bac754fc5809dbc5dc8153b660cd5c8ce2f98df771bbb131acfb472e856ea8b11baca731f836105bfa61a16f48b62e99fc1fc6778bbbd8313488ad0d1b1e85161900129cdd63ad63c2cdb08534db7f0b71e754ec087c8b73674aa7c447bfc2e97e550b73529a708156d77037da9455ff9308ad68e48e34c3f5590ead9958de093daea7410551a68ca4f095469d79e85fa5214bbdec46f328123eedb5db0f4cac8fee3b78f8138c9ccfb978ef2f074f1a2b77ff3976253ff75459ff20e36bfc68536122b65b9bc33d7819c786b519b7d4f1a40547b216c9c49d79949ebc687ceb6bb8678894ed98e00ea3021ceb975cc6979e227c6c392c24db62861fc4b088c15c3e9d6778b367102c5e61a34871d4e79574518c0d7fbc2e68a27615ce5a573c04c2796e2b9cb0350e4bdaede877a18194632aa48e8c50afbb12e0c2b2b74045abcc0d7b13c3e5e6bc7e476faf9e868a05222d2e4b9001b598926c4a868360236a4c5382385c01834c71bb23b062271c5c80b375ab26f3cd907b4ae8cc59889271fa135219888aca49ad501b47843194f67922eff89fb923615b79ad0c6eb7ffbfd0a1b8db65e2229dcc5f120b949c67b8208b3ab7d77cbab13c1599967f7c8d0d0623d0107c161bc0b1ffd25e3d583625385fa11a423735c3480b3aafec29ac65d3729b765d77a20bb3f45f24b13e5cfcd185073add069354bdead1c464471a5cba941f25d0d8213cedf18af0da1bab08433aa3b30a22b5885e73d9944853c9a68fb3fdf28f9d459dd1a160929a778c8c2cdc5b42f97d1147df763b2dd99f6b433fd36a6f7da5663bd1913a2576233f954764875f482da6cd8b30ebc107d040525a1e86372756dd37eb49cc17e310421cf743c53eea8eae7f94a04191591342c904b1acacbb81ed2e31ea939efaf384b237729e0df2b9bf52f7bb6c39cc9b4a940815ff52a6037bf012e0ae898b7929e713bda93467d9496c4591a7d1cd7d1bbdc394ded42859d2912174ef2eec7f1096ba6f075e45", @generic="ce5e992a3c4695e4cd7a65f3c0cfdc25588fa8b4974cceceb0915fe26a858ae0f868d06f715dce4b374a7e1ac779d64dcdac19d9147f73915bf30b4565c82d7a3c0ed5f6ec436e0d2af9953e77489bcf50e529f24b1c456eabd66513bc533bbf31705dc90f86e245f3b47049dad98bb54afc62d38a9f360966bb3fa39ba281c9c1f055ebad387f7e32aedc3bc7585a042f2e795c96ee65b5a4e62c05f356be7fad0117276f1f150595656f61ef209cfa5a8189b833daa7a6f3a84039fc6a3d000ff39d4adf3f9f50bfb38561f3d9753e9a666a0bc056a06dc2366190545b9b0e5c5c6731e9aee3753b96f60636eb25bb28684109f8eada9b71393f05c7f5e94edc0a4049b77ef00ba90c8890e90f89b9c5e9a51d5bd13d0e07bc7205ace430379f069b176c970c9f70686cc5c48c2357400a74640cd815efd771025696812a126267439956a28d79b52c04875b8088de7a0e6c134e2369a76ccc14d876ad0be4da8a94161bf88218e0474dc28b5f5eeeb491940e086b82b4cafaef4e506e2e499f1cc0c71ba5fcf19e86e1107cbdde6ebb4ce130065941c2b8d561e75e7de1b97809c3c2b06095f568a1d9bba339f390200e93b29efcab41e1f1a868df00677b7095af62579e1ee7795d17bddf63a50e914918146d1fd4e6b54713ce8f99a7006f852871db01a9fa8b496e88e63192875729734a412ccbdbb900d4e094e46aba5b69fa9b1d3bb3de4d1de6fb86b5241a396fa93a3c3c30287d471a7b49a9618174322371b8a6654524060f180828d542184d8f2790957f205c199dd49f0ef968e8e8dc41e22795d984b5462baf69134c8752952f19673848e9bd8a49c767f5563d1338a95ae3083621d1c0d4a853d26374833e2c63eac632a9402ab848153f57578400056cd6b6bafe4815b6c826bbfbf5b9f5d4468e3758e4a9cb47d8a9371b7c9042ce7374666bbc4e14d92ff94c319ea1fb0edff5ce41ccceb5950fdef824007ed7a33980419ff5523a82426bb5b177d26939018ea884a3b801b35f602c67ffe735c64dec9e07959283db26e99dd62fe9e2bf6041b64de1b74e61dea5b040886f50e26a573161402962c30030dec53be4222d75c4e1a6878d57e365c4b5330ed6ba887adb8df0db03a90d54bfe8fce8df3de3c85913287c85976474a436329f7f7f79d6740bbab65320d3c0c4c921d029f1d52cbdc20613c4ba0e2098b7f056c79b4dae0972e254714d74585121ba40e230947b97f10ff394d66cb9d98a726a109aaac46f8a369b1605ee456b6c8062cbe90dde81c68e2c019fac38f3391e6239534c76d408ec84e93127c76188b229e9a490f2dd1cd338d0278b863add27bb33b81706610eaf891a9040f46dccadb6948ddf0ebb340c9ae4a08bf171b455cd389a84dffe7f470a85c97d703ecfe7b3e0173b1f8eaf57ddf679e15807a216dff2ab921ff6371feeba73f19ad136d14e1c21eedf16981252e99242c468ac4f5aea477acc93ac5a049f4a36460bd2467d27eb27a74ec24237eed138a7fbc05781105119e571549f71ea0e7e95062b8e5b12c9c1a5a24fc4bb8a33b5b72b7f258bcac50e10df9c1024f9bf41c345b3f05fff02d889df32f02a6fec971dbad396ec6354e93be0dd161603acdf958e1ba2c0f9382b40438fe65038eba4fd3ed354683e0dcb34745b4a43722c4e164c3fc070f8696cb3af1cf1a90e32f98fbcb7c5c56293fe73fa133da4f8a5cfde599d52abfa5f1b02cd94b8efb3d2d85634c52431b79af9b6c5763355af9b68b1ad6daa0ec30ce013165664f1d6cca127a8594c78f6af8bb086fa6ba5f1d0a8dba53841b7db018b87ed3704eda35082d093f6365025bf5b6e20b58d648d6bd4ad791a2422c424480874184f130653aa977272d12db2ed3814455657d5bac9f72145d2ef4063d0b25a9cbe3656c04cec234647b3fdabf53418d60390ee1e4e34e596f0ba0aaef73ad3f286239d7cdc25057879c2c719887cb316cf0df3d37d415605b6bb7529471d434f09599bad672083ccc0ba223f730e9f4bfe4539700bab69c660a47e5a133a88f77b6e0efe804de7ce3c96870c45177626917163f7828b4bb177f8a8f6f70e96650a07d17b655fa868cb086245a4248a8c032fcef5a11844c2b527f01ac4787a7c53a235f45cd45cebcbd0e3610f83b51c02da4d22fd9403b05a83351c86a168cc59323bcd7d56e3b9cdf47470f307ec969cc01e7ee445f09d41accbdd05cd16a32c4f7205185d4662cfe75dbc48034787bb22d4dc84c4e8665926b244ee0dc6c39d334e4f9b22ffc45bb2e2ecf6efa891bbadf1cab2e7be591895d01f99d44ab0e955798060129c92e54ba55128c3ce804c8bc3e8b22230d8bff7e9b24130cb755906fcc50c243c165d38ccc7432d8f97ee7b44aa2cfd27ae5a1ccdec0118b1ef10b9d06d25c2d6e8ecec6e4369231925079f68cd4044929abf9c968ae4cff6a816bbe0508ea0451e47635bfce032ef737b200b7e5afaedc40b8c029a71e46719735367b9999e5617171d65fde6f8ecd6c69715614272209bab3cc84ccec232d10dace9801c8d51bb7520e6c91bfa9c7b0afe2ae19d5baf800b78eed48bf5d4814e8b73f1573a79b5c1736466d6bb938dd781ff0d6eca0ab30dddab699d5c1a9decacf8a17eab6c41b3d21c62d09e93c02e43251ef776c83805138ee4777edcdf95a951414c837bb59068bb8f7b08f5ff3e4ee3e5550e8cb6b7070fca9a3038e6cf609116924a95a3aaecaad7ea567621cc2ec0c5bc2e6a0f069d9c9c799dc94dcd453c91964f436f6258c7c3201aefb47ffed71ea10b58c6a3f79a667e3c15a048a51c44f346bc0c5c86b61e0698e5c5b5098f5e91e5a6fcdabd8da31a2381f9cd17ce729fddc7ae7f2ecc75a91030665fadc473650365b7bb967878376ff06744d49696ae29405c3233490e6444e9c34271a46c0b673ec8b31e16ddd8b160a683db79904045c47b896dbe93f81681d8b11d8015099bfd2eddb18d28de5137e7300c765ce2cab5d583f03fbaed52781d7739cff635825cc7c5e8eea303386becf26a10a274da2f952c7a8381ec6414799fb42735863d20bc625c46c15d92ac214fb054fb429b715b9e14c358cee1b8f409a43d15da7ab1efc95d3198e4b11913551a7d5ce8bcf2c5c1e989928b212f85fbbe0fef7955a95b04327861986acad90af97e37313e9e3e114948c22a4dbc622b0c8ecf67231e7b034639f74fd20e3eccb1cf9b83cefc0335a684d0d0a9ba6f7412c1fa70c78b22cb4d1acd8d5aff401f2f1aea363cec52a32adae19c5194f807ada2d6da41c4fff8c8bd2dde5becff7f23c2320c5186852c0f1bf610c725dbc78e59d38b2e0ad0078b082f786030f42c18d71ab460b2144c42af7421cb27fe7f456eb8ce026660124c3d0d7d1f2385c960b9eb83863dd1e8abb20a9e9fb375ea1d4cadfd245b3a0d1a4e0f76c1e5620413a57f6f00f2e12fc6c21c7cf01f84a34fbec2c64c4f7e39497e60b4e87fa4a00145bcc147bc64c1e6bf0137787148567a3975d3b0f4f8d84fcd01116801c52e4c005c72f40a3ac4c0c1f36a8d690927edded346bef556452113e3f363338cc3bc232019fdc6c968ad1d244dc5f3da6d8d778bc9edde03a0d143fe6e99f788b5b1a3584ab336ed7b92103ae77d0e7f3ff64ebcf68f028f493d90591eb2f1dd9d23f1961c974d2186afe7c4c5c320a2090e825318b24d6043b9b2351a91c1f2f39601f9b152dd8afed300b140a8c68fa1f08c3c1e1a176eabc4bbe7e311336cd315dc1de20f5f98945b5ba15166e365f76dccc553c14ef0f0ff898abcfe46375064ae8cf3c1a0e4a8cbad4725f899967f8529af1a6c2ed093bdeea16db4d84f9119aba08d7b22d26e78046bb22c05f6de70f87b3e1d0f814db089c239a26464b3661cae50024520725cd1ba6525e1a0795681869992b16c970a821e8516afb9ba7ce9216fb71a936a0879e2c5ab573c3101d2fe9bcaec8f269a4501d567d848f5eae95f48bbb3a0ed2a64cf1f9d1ef247c4a01caef40f3b20f3f4a8a4b2561978be2e80fa94cd14d992ffbba6db151ce92bf259b93b135167bfa63796d302ed54d8a9052215b58307c88a82ded4013504b59071c03c74a8d718a18e0b40e9e6bfbcdbc2780a6dba9886a6583978093b1975ecb75ea60f5861518939fc3e666289b9a0d916d9477bff0bf69952e1da0dc5aa3739bafd92a870b0fb25a856edc5af56a0de0fcd817b134232106d95b25795ffd27aa3f3dc351fac85828bd6b2cf57985c7b017beff82dffbb2762ed174f82ff141ad3ac3d523bc06b477b4b88e6b41fd5f1878c74e1325a27ff0fa59b5308783eaf6ebe3553dde9692dca4450f83e77be9345582fae75e59c7d7947b02fc32f60bc0f3cb48befbb2c753720634d3f47201211b82fd4fbe1e75f360ebc7e065792743eefea1235ec75f31eda68d9d90c4c0c5780047cfe84e3f4fc8aae707acb6472f3011856544bc6f81cd55db6e7a80ddb25f62aef3be852890b1abf28dd0e78d1517b9ab6f729dfc40b2a55a75f0b0b094eacc7950749164ffd1de06f700b0db98b643a8a34b240102a13d4cda4c7a4e98c9788907c70613bce6ee68fb63c93bff8263b2d40cf291522a002856d711cb589038c70917b4ed7e96e3ca93d245daf3d506cdff7b68a7726a82568b4308c07dc7391e61ee908914014e2086cdecfef5eb65c079f21fb95b3e8f42c6db419cc2b9191a4cce2551b59d03a2e6836f2fcb155da7c5fffa7d61fdeac6496dfddb0bf555d26e7c175919b19c1dda3c1cebaa5c225c6de7e006d76e5c776faf079012c5983551aafcf3a9e751799daab0ae8d744102a164485b95cd5d3a45b642bac2ea6a10581b91ae6963bc8a47a87c4bccf34314be32f91f63b613338e70b8f73651e907448f7e4869f21473ed35265c54462fd2f54ae80ad23000b34481a1130ce41e74253bf351fe52b49d8833438642600405fa81dfe6d7bb755a54b91fe0bc965e1d4b3e628628d2bdc1bfb59287b5c985beec21ab44b154fd0c562defd738985cb6bebed4fdd5900b6eb13eb6a47056e1c0197190fb0e72dda915f0cbcdebddf317049d132682a663f892b3f2ebdc007c6b0505264e0f20ba092c7c4b2f478a04d077c1a270ac4372e2e63aaf9b05cfda899e75309f0dd24ff76fc78b2554619a45820067d10121138d0ef39a0e7bf61ac613f83dc9a7eef6d5611983e504006f28610b3c1ff000c0496d3bb213be9e33291c1ad2f5207f98808ec9b9ad574fe082d2ccb8ec704f8e03a8f7980ce635030c560beea036007fa204b1f5ebc4549defcb338a37d37d2708600ac8d0531e7973c8d19b851f542e2308090105d5a50f07b47faa609883ae032b4c4634f87641cd8fd93aa338de3d33b2607627728242e6338d86ab269f6bf41d1709788d8c30f001e2bfd79f12dce5ab2b7d5f6df8dfe9871f854dd1fcdbd91cdf3cbb405f80c713f73e754092cecacfb48f5b8c04d77572b9f294d4e2eb4ddb62473f044e58045bd06924db3e99fe25ff0b2d623ede4c682efe44904bf2c6c54cc67100ca321437a1b9b30f8063da5840905cc7850057943949f366ab91ed68c0395f0a61a825285b789e0deac719b76b16be19047091a52363fca6bc8d62bc9ba563f989ac5e7ab2d3805adcc6eda2b087aac27e6a64b752ff9897878a1d5cc550836005574f44039f1ff520b77cbea2c59bbabd2ec18f5a8ff4e8cbee75db8454ce0928c9cd4abd9f1e26bbb73c83e4337c96e17d865d0e2", @typed={0x8, 0x2b, @uid=r6}, @typed={0x14, 0x84, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @generic="74730923ccff951ae6cdc05867d6757fe548e80623c451511c3b3972e0ea3e9d1ff417bbb398fc7510516b320de4ec4d6ad4b3cec937b8443fef7be0929fcb77df518c7910aa25f03d136b15ac84c697389069e5b3c6c5d33f0156cba87492410b4be59a3ff70e91f421fe6dacc24d170cdbd4467061c8df38e1f16d5b261cef6b3fd3a37c109d593cf3e5ed283d4b16e69d5d13cb", @generic="d448e5cf51c97779e6ceb36e0ba6", @generic="db84a70138f20c57a24a860b67439edd63adc625fa064815c6d3f9521bc1df9bbac89f3aa0f6da4bf60341bf119b199fdd3923bbe57a524ff56cc6ed4712f0b82106bbb436bd6023fa2bb4e9e7d14c61fc937c77a44025886c87e2a048764ce79a35a25d7aee0a76a627cd861c86fa36bfcb53039a645853216ff0689bec757f7f7412dd9353355c60c587533c70c085106f973087d5191bc5866aa3bf174643d86074356fbe9934701f7f44c5b01dfdaf52defc008df383e48bb2da6c87124b972df5f4f6c2c0f6e9010a0e2f3cf31239df0500f97537b7ee3ac5f84685b6c3ff64e051a42bdb1cd8939f0b8d1c407a806d01", @typed={0xc, 0x20, @u64=0x40}]}]}, 0x3278}, {&(0x7f0000003600)={0x10, 0x17, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x4, &(0x7f0000003f40)=[@rights={0x28, 0x1, 0x1, [r2, r1, r0, r4, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x30, 0x1, 0x1, [r2, r2, r4, r0, r3, r3, r4]}, @rights={0x18, 0x1, 0x1, [r2, r2]}], 0x130, 0x8040}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:25 executing program 2: r0 = semget$private(0x0, 0x0, 0x2) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000280)=""/2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40100) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/126) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x50) r6 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, &(0x7f00000002c0)=""/100, 0x64) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00') ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2654.467053] binder: 793:794 DecRefs 0 refcount change on invalid ref 6 ret -22 [ 2654.476082] binder: BINDER_SET_CONTEXT_MGR already set [ 2654.488409] binder: 791:798 ioctl 40046207 0 returned -16 [ 2654.507848] binder: 793:794 got reply transaction with no transaction stack 13:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x10000, 0x6, [0x100000000, 0x8, 0x1, 0x5, 0x5, 0x7]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r4, 0x3, 0x10, 0x10001, 0x2}, &(0x7f00000000c0)=0x18) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2654.515350] binder: 793:794 transaction failed 29201/-71, size 0-0 line 2741 13:44:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8001, 0x101) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000000c0)="3d82795103a6c1d1789ce3ff4a8e1d12232d14c62bd448eda4cd7c3796202f269351b8492492e0fef985fac347c8e546091ad7709f1193cd14557edac7e13e4a47e3fbd34d6521ef926158baf16cba7e7e9846b710ca5fc6e25383abca7af8daea2db82eaeb28ead7489df4bcde6dbdaeca7cdf05049a10bdd8b6d2ef92a9c4a7e283953f8fefd9f713f1205debdf7e7a3d5c0d010e2575ae0362aa50e789f144bd3e557010b267dedd7e6c08588ded14ec78412c3b72998357f14238c66d0ceeb9f51599c0598fc5416136b210708ebe8d84850f82d68c39ede8cddc332f301d4", 0xe1) inotify_init() ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40a482, 0x0) [ 2654.576886] binder: undelivered TRANSACTION_ERROR: 29201 13:44:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x4, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2655.056983] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.063995] binder: 816:821 ioctl 8912 8 returned -22 [ 2655.076643] binder: 815:820 ioctl 40046207 0 returned -16 [ 2655.088568] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.089658] binder: 816:822 ioctl 8912 8 returned -22 [ 2655.096596] binder: 815:820 DecRefs 0 refcount change on invalid ref 4 ret -22 13:44:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x48, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2655.107213] binder: 815:820 got reply transaction with no transaction stack [ 2655.115885] binder: 816:821 ioctl 40046207 0 returned -16 [ 2655.143366] binder: undelivered TRANSACTION_ERROR: 29201 13:44:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2655.199837] binder: 828:830 DecRefs 0 refcount change on invalid ref 72 ret -22 13:44:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x100, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x9, 0x3, "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", 0xaf, 0xffffffffffff1833, 0x7, 0x3, 0x9, 0x6, 0x2a5}, r3}}, 0x120) listen(r1, 0x100000000009) accept(r1, 0x0, 0x0) 13:44:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x200000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r3, &(0x7f0000000000)={0x7}, 0x8, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2655.372458] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.395382] binder: 842:844 ioctl 40046207 0 returned -16 [ 2655.419642] binder: 842:848 IncRefs 0 refcount change on invalid ref 0 ret -22 13:44:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '}system-', 0x20, 0x2}, 0x33, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) [ 2655.449495] binder: 842:848 DecRefs 0 refcount change on invalid ref 0 ret -22 13:44:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2357cac99fdda64f6d2c6c76662999c880e12746d984199d147aceb57ed0fc91abdac7d618ff1375d0dff699a3d1333dd5407e451d84bb5f916c3e8e59cec2d8217d757c84e50d4a03b4eaca4147de739f54add6a9c82d812c3c73d88189158431b01c43a08ebc84ccd94e83578f80dbd1f3ce4a4e243e11788653a057f0b5febe8fb60488c59a3199fd84986349febf57ab7743f2d464d12074398c6f55a875a66f4583ec1a07555e7c44e83b4c7c158f5bda575c87f6ac5fba1c546f1c8be069debbaccac46d60cbc983e47a2e96d613390660298e4ec98bc8c9ccf438d79698ec684b2009fb7e701588cadd1108d24d8e7e8bb99b1c20bf653fe3", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6800000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) accept4$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) r2 = dup2(r1, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) fdatasync(r3) [ 2655.944148] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.959397] binder: 865:866 ioctl 40046207 0 returned -16 13:44:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x58d4fc0f2e2bda9d, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x54a, 0x402400) ioctl$TIOCCBRK(r2, 0x5428) unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4068aea3, &(0x7f0000000000)={0x7b}) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xa00000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) prctl$PR_SET_ENDIAN(0x14, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="8f3f3ed3831e69deb7dbec69bccb46079c522c88546d2e089c4d04f823a734bffd4d6358c18d3b10b6232a14cd76dc8ff2dc9464f1a98fc08b3865da960e6cfaec1da259a6e4", 0x46}, {&(0x7f0000000080)="9c3fe21f95e00e9923459aa0747e759401d25b1877202b31738eb9bf9f106892a2a9b2", 0x23}, {&(0x7f00000000c0)="58455345cd44a61963bf766a3fb4f02e51e7fac954ff22beb1f74492112c75f9afa0cf26d0fa045cff7a4b2bb82cd78e1b6b71c38e0d38a77149923939116179049a877ee03e1de678ff59403b48c63f41be9376cece322a706e37491ce551ab9f4e54c21dcfb815e35ba716cf10c7fad5d1402aa4fb47dc201614824a07d7", 0x7f}], 0x3, 0x2000000000002) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0x8000000020, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @empty}, 0x200, 0x40, 0x7, 0x5, 0x4, &(0x7f00000001c0)='bond_slave_8\x00', 0xcc33, 0x7, 0x8001}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) getsockopt(r2, 0x9, 0xd1, &(0x7f00000002c0)=""/83, &(0x7f0000000340)=0x53) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x80, 0x0) [ 2656.277906] binder: BINDER_SET_CONTEXT_MGR already set 13:44:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xbc) listen(r0, 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2656.298138] binder: 886:887 ioctl 40046207 0 returned -16 [ 2656.298162] binder: BINDER_SET_CONTEXT_MGR already set [ 2656.320695] binder: 890:891 ioctl 40046207 0 returned -16 [ 2656.340084] binder: 890:891 IncRefs 0 refcount change on invalid ref 0 ret -22 13:44:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x801) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2500, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6c000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="cb000000ba9f0a97aa8fd34fef13cd53ca75fce6143961d055f527c0847c32d400814f6d7403b51223781a82ceaac1732b316639cb81f3594f2ff77507e271f4114198aa4fb0c8af7402fb69a9ca308b879e8cae0b2d68e2bbf69a4a64e2948c98c473546384a0f2842ef12ff71054b7488708ed7d109426be233705ac0b2adffa5b544c9087144c8d7d10dbcaa206322dac721b252422d78a541725fbbe1293ce012394bb77759273a736dbbc22197bd598ba81c9048bae185d5e20459b01cd2cc9d225d71768d49e9ec212865b68"], &(0x7f00000001c0)=0xd3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x100, 0xff}, 0x8}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000000009) r4 = accept(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2656.788144] binder: BINDER_SET_CONTEXT_MGR already set [ 2656.808195] binder: 915:917 ioctl 40046207 0 returned -16 [ 2656.810577] binder_transaction: 4 callbacks suppressed [ 2656.810586] binder: 909:910 got reply transaction with no transaction stack [ 2656.819373] binder_transaction: 5 callbacks suppressed [ 2656.819391] binder: 909:910 transaction failed 29201/-71, size 0-0 line 2741 13:44:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = semget$private(0x0, 0x0, 0x200) semtimedop(r4, &(0x7f0000000000)=[{0x2, 0x8, 0x1000}], 0x1, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_init() ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x60, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2656.874733] binder_release_work: 4 callbacks suppressed [ 2656.874741] binder: undelivered TRANSACTION_ERROR: 29201 13:44:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'veth1_to_bond\x00', 0x4}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @local}}}, 0x88) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x0, 0x202) 13:44:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2656.943185] binder: BINDER_SET_CONTEXT_MGR already set [ 2656.951093] binder: 930:931 ioctl 40046207 0 returned -16 [ 2656.967126] binder: 930:931 got reply transaction with no transaction stack [ 2656.977349] binder: 930:931 transaction failed 29201/-71, size 0-0 line 2741 13:44:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6000000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2657.039533] binder: undelivered TRANSACTION_ERROR: 29201 [ 2657.072234] binder: BINDER_SET_CONTEXT_MGR already set [ 2657.077935] binder: 943:946 ioctl 40046207 0 returned -16 [ 2657.106591] binder: 943:946 got reply transaction with no transaction stack [ 2657.119796] binder: 943:946 transaction failed 29201/-71, size 0-0 line 2741 [ 2657.176458] binder: undelivered TRANSACTION_ERROR: 29201 13:44:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:29 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x8000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x49f, &(0x7f00000001c0)="0a592d02403162857170707a05000000ff09f1c9d5f6182cb21294dc8d4d131f18d661d3919b92c8b89c32235f83b916bef1108de9c3a209480fb9de801eb92f8e20a684114d0f7a809c8fbc020102ff780702b8d48d9f1070440975a2") unshare(0x400) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = geteuid() r4 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4004ae8b, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x16) 13:44:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000000)={0x6, 0x100000001, 0xfffffffffffffffc, 0x2}) 13:44:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x600000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000140)='/dev/swradio#\x00', 0xe, 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0xffffffffffffffff, 0x5459, 0x100000001, 0xfffffffffffffff9, 0x3, 0x1}) listen(r1, 0x100000000009) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000300), 0x10000000000000ea, 0x0, 0x130, 0x24048855}, 0x7c}], 0x3a3, 0x81) [ 2657.627834] binder: 955:956 got reply transaction with no transaction stack [ 2657.652118] binder: BINDER_SET_CONTEXT_MGR already set [ 2657.653064] binder: 955:956 transaction failed 29201/-71, size 0-0 line 2741 [ 2657.671574] binder: 957:961 ioctl 40046207 0 returned -16 [ 2657.681280] binder: 957:961 ioctl c0106403 20000000 returned -22 [ 2657.691398] binder: undelivered TRANSACTION_ERROR: 29201 13:44:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x5000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000000c0)=""/185) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x2000000000007, &(0x7f0000000040)="0a902d02d67e6285f17070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2657.815410] binder: 972:973 got reply transaction with no transaction stack [ 2657.829733] binder: 972:973 transaction failed 29201/-71, size 0-0 line 2741 [ 2657.842275] binder: BINDER_SET_CONTEXT_MGR already set [ 2657.852655] binder: 974:976 ioctl 40046207 0 returned -16 13:44:29 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x800) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="d203c5a3e8fe604aca8e510c32e776070754a6fd65eca2f9f4b0a0245439c045eafaa024453ccd47836b1584c2104a8c37cf50f59fe4cf2b88b6638f3176748f7235edf4bbf45c5eb40153afd63707f01c193198640b6a86b683ce2e49102c46d8cd33ba15561ab506be99fceaf4af5a9d636db8afe4ff83c18bab7ce6c1abaf3565b6703a5efa685812cf05b76fe8be66e4122497cc135ffb6a172657093474b5674be386305e6159d3d3bd3578fc69dc16e4e52e6121dbab06e32289255d4c8c03046c9a3026bb843e76b9c68a46ae71da40476a04d586c7a88dcc6d35281d00def47ec370", 0xe6}], 0x1, 0x61) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 13:44:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc4c85512, &(0x7f0000001000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2657.903919] binder: undelivered TRANSACTION_ERROR: 29201 13:44:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x700000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x20000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) setns(r4, 0x0) 13:44:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/15, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 2658.483248] binder: BINDER_SET_CONTEXT_MGR already set 13:44:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x301502, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200400, 0x24) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x26001, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x400, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x200, 0x0) r8 = memfd_create(&(0x7f0000000300)='vboxnet0cpusettrusted\x00', 0x7) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) r10 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x6, 0x20000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000094}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008804}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r11 = dup(r0) r12 = dup2(r0, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r12, 0x40046208, 0x0) [ 2658.507785] binder: 999:1003 ioctl 40046207 0 returned -16 [ 2658.531275] binder: 999:1003 got reply transaction with no transaction stack [ 2658.540586] binder: 999:1003 transaction failed 29201/-71, size 0-0 line 2741 [ 2658.572033] binder: undelivered TRANSACTION_ERROR: 29201 13:44:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x5, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x661, {{0xa, 0x4e24, 0x9, @loopback, 0x2}}}, 0x88) 13:44:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3ff, 0x100) recvmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000001c0)=""/184, 0xb8}], 0x2, &(0x7f0000000280)=""/232, 0xe8}, 0x401}, {{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000400)=""/219, 0xdb}], 0x2, 0x0, 0x0, 0x8}, 0x322a40000000000}, {{&(0x7f0000000540)=@sco, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/74, 0x4a}, {&(0x7f0000000640)=""/103, 0x67}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f00000007c0)=""/205, 0xcd}], 0x5, &(0x7f0000000940)=""/243, 0xf3, 0x6}, 0x1}, {{&(0x7f0000000a40)=@sco, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/222, 0xde}], 0x3, &(0x7f0000000d00)=""/52, 0x34, 0x8}, 0x5}], 0x4, 0x0, &(0x7f0000000e40)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000e80)=0xff, 0x4) r2 = dup(r0) r3 = dup2(r0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) 13:44:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = accept(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x2, 0xffffffffffffffcb, 0x3, r3}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:30 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x800) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x6, &(0x7f00000000c0)={0x7}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup(r1) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x5957, 0x6, 0x8dc, 0x2fc, 0x3, 0x7f}) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000100)="6b5a2cc3411b633b01552de0fc7f15978a813ee953661be747852b40432dc573705a22a41638905fa29e0f8fdff3daded83a15cfc62a966e450bcca0") r3 = dup2(r1, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0x40046208, 0x0) [ 2658.716869] binder: BINDER_SET_CONTEXT_MGR already set [ 2658.733037] binder: 1018:1032 ioctl 40046207 0 returned -16 13:44:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0xffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2658.766814] binder_thread_write: 4 callbacks suppressed [ 2658.766829] binder: 1018:1032 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2658.787688] binder: 1018:1032 DecRefs 0 refcount change on invalid ref 5 ret -22 [ 2658.799999] binder: 1039:1040 ioctl 401845e0 20000000 returned -22 [ 2658.804684] binder: 1018:1032 got reply transaction with no transaction stack [ 2658.817655] binder: 1039:1040 ioctl 89fd 20000100 returned -22 [ 2658.823921] binder: 1018:1032 transaction failed 29201/-71, size 0-0 line 2741 13:44:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x68, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000000)={0x0, @ctrl}) [ 2658.879081] binder: undelivered TRANSACTION_ERROR: 29201 [ 2658.917283] binder: 1047:1050 DecRefs 0 refcount change on invalid ref 104 ret -22 [ 2658.932913] binder: BINDER_SET_CONTEXT_MGR already set [ 2658.935063] binder: 1047:1050 got reply transaction with no transaction stack [ 2658.948387] binder: 1048:1049 ioctl 40046207 0 returned -16 [ 2658.951812] binder: 1047:1050 transaction failed 29201/-71, size 0-0 line 2741 [ 2658.994784] binder: undelivered TRANSACTION_ERROR: 29201 13:44:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x800400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) sendto$packet(r1, &(0x7f00000002c0)="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", 0x1000, 0x800, &(0x7f00000001c0)={0x11, 0x8, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) 13:44:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xa, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2659.327905] binder: 1057:1058 DecRefs 0 refcount change on invalid ref 10 ret -22 [ 2659.337222] binder: 1057:1058 got reply transaction with no transaction stack [ 2659.345526] binder: 1057:1058 transaction failed 29201/-71, size 0-0 line 2741 [ 2659.382079] binder: undelivered TRANSACTION_ERROR: 29201 13:44:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) 13:44:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6c000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x20000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x420000, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000700)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x4, 0x3, {0x77359400}, {0x0, 0x7530}, {0x4, 0x1ff, 0x0, 0x8}, 0x1, @canfd={{0x1, 0x3, 0x7, 0xeba6}, 0xc, 0x3, 0x0, 0x0, "e6fb0c858d110c0e399aa1ccdc041bc36c2dff866ea07f23b353ed93f58911184a26c36a329c0407a3772f1f8e1d438dcbc9d20e2398dd44fc00ff1e7930d7b1"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000200)={{0x6, 0x0, 0xa4, 0x0, 'syz0\x00', 0x5}, 0x1, [0x0, 0x0, 0x100, 0x3ff, 0x9, 0x7, 0x3, 0x1, 0x400, 0x80000001, 0x6, 0x4, 0x3, 0x80, 0x4, 0x40, 0x400, 0x1, 0x2, 0xffffffff, 0x20, 0x1, 0x9, 0x9, 0xf8, 0x4, 0x1, 0x101, 0xffffffffffffff00, 0x2, 0x6, 0x6608, 0x2, 0x7, 0x9, 0x400, 0x15e, 0x5, 0x3, 0x5, 0x1, 0x3ff, 0x9, 0xffffffffffffff31, 0x0, 0x9, 0x8, 0x7, 0x8000, 0x7, 0x4, 0x8, 0xfffffffffffffffe, 0xffffffff, 0x3000000000000000, 0x0, 0x8, 0x8000, 0x9, 0x17bb, 0x80000000, 0x800, 0x1000, 0xfffffffffffffffe, 0x2, 0x6, 0x7, 0x81, 0xfffffffffffff27b, 0x1, 0x8, 0x9, 0x931, 0x6, 0xfffffffffffffeff, 0x1, 0x8, 0xffff, 0x7fff, 0x3f, 0x81, 0x3, 0x4, 0x7, 0x1200000000000000, 0x80000000, 0x2, 0x1, 0x80000001, 0x80000001, 0x20, 0x7fffffff, 0x80000001, 0xffffffffffffff2a, 0x5, 0x5, 0x40, 0xff, 0x6, 0x8, 0x0, 0x7, 0x1, 0x4, 0x2, 0x2, 0x0, 0x0, 0x100, 0x20, 0x1ff, 0x1, 0x9, 0x1, 0x3, 0xc1, 0x2, 0x80000001, 0x5b, 0xfffffffffffeffff, 0x7, 0x1, 0x6, 0x1, 0x401, 0x2, 0x100000001, 0x5], {0x0, 0x1c9c380}}) r3 = accept(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) [ 2659.587259] binder: 1070:1071 DecRefs 0 refcount change on invalid ref 1811939328 ret -22 [ 2659.593910] binder: BINDER_SET_CONTEXT_MGR already set [ 2659.607610] binder: 1070:1071 got reply transaction with no transaction stack [ 2659.621131] binder: 1074:1075 ioctl 40046207 0 returned -16 [ 2659.627124] binder: 1070:1071 transaction failed 29201/-71, size 0-0 line 2741 13:44:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xffff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x0, 0x8001}, 0x8) ioctl(r2, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) unshare(0x400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440)='/dev/kvm\x00', 0xfffffffffffffff9, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000002340)="919564e3a5c48b25ef6fd26e6efe2ee3e00ce71bf9ddcf820e00516140e166a2530bb173e90b3c5d008b8140fdf1ab9e9450472d16c3bbb7892774ff5e0f0ec77792e8b09ea9de9385f4417b4b1bfe3f491d25e8b3cc5186c3c897cf049cf0a2d858bd1be677ef76f5ac2b074bfed017ce4a25b7fe65d9675f982b61cfd3179a3181b540") ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x6) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) semget$private(0x0, 0x2, 0x200) ioctl$KVM_SET_CPUID2(r6, 0x4004ae8b, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) [ 2659.633212] binder: 1074:1083 DecRefs 0 refcount change on invalid ref 536870912 ret -22 [ 2659.666318] binder: undelivered TRANSACTION_ERROR: 29201 13:44:31 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 13:44:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x60000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x403) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) [ 2659.780563] binder: 1091:1092 DecRefs 0 refcount change on invalid ref 1610612736 ret -22 [ 2659.791342] FAULT_INJECTION: forcing a failure. [ 2659.791342] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.823167] CPU: 0 PID: 1094 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2659.830464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.830472] Call Trace: [ 2659.830498] dump_stack+0x244/0x39d [ 2659.830524] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2659.830557] should_fail.cold.4+0xa/0x17 [ 2659.830586] ? __lock_acquire+0x62f/0x4c20 [ 2659.842538] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2659.842555] ? zap_class+0x640/0x640 [ 2659.842578] ? zap_class+0x640/0x640 [ 2659.842611] ? find_held_lock+0x36/0x1c0 [ 2659.842648] ? perf_trace_sched_process_exec+0x860/0x860 [ 2659.855571] ? drm_unbind_agp+0x20/0x20 [ 2659.855594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.855617] __should_failslab+0x124/0x180 [ 2659.855638] should_failslab+0x9/0x14 [ 2659.855659] __kmalloc+0x2e0/0x760 [ 2659.865001] ? check_preemption_disabled+0x48/0x280 [ 2659.865024] ? drm_ioctl+0x48d/0xb00 [ 2659.865046] drm_ioctl+0x48d/0xb00 [ 2659.865071] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2659.865099] ? drm_ioctl_kernel+0x330/0x330 [ 2659.882047] ? ksys_dup3+0x680/0x680 [ 2659.882075] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2659.882099] ? drm_ioctl_kernel+0x330/0x330 [ 2659.882117] do_vfs_ioctl+0x1de/0x1790 [ 2659.882134] ? __lock_is_held+0xb5/0x140 [ 2659.882153] ? ioctl_preallocate+0x300/0x300 [ 2659.882171] ? __fget_light+0x2e9/0x430 [ 2659.891667] ? fget_raw+0x20/0x20 [ 2659.891690] ? __sb_end_write+0xd9/0x110 [ 2659.891712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2659.891727] ? fput+0x130/0x1a0 [ 2659.891745] ? do_syscall_64+0x9a/0x820 [ 2659.891761] ? do_syscall_64+0x9a/0x820 [ 2659.891809] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2659.891846] ? security_file_ioctl+0x94/0xc0 [ 2659.987680] ksys_ioctl+0xa9/0xd0 [ 2659.991157] __x64_sys_ioctl+0x73/0xb0 [ 2659.995058] do_syscall_64+0x1b9/0x820 [ 2659.998963] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2660.004330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2660.009261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.014107] ? trace_hardirqs_on_caller+0x310/0x310 [ 2660.019142] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2660.024191] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2660.029216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.034068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.039275] RIP: 0033:0x457569 [ 2660.042473] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2660.061491] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2660.069214] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2660.076484] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2660.083767] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2660.091067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2660.098339] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x4c000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:31 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2660.215003] FAULT_INJECTION: forcing a failure. [ 2660.215003] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.215530] binder: 1109:1111 DecRefs 0 refcount change on invalid ref 1275068416 ret -22 [ 2660.242297] CPU: 1 PID: 1106 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2660.249606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.258966] Call Trace: [ 2660.261549] dump_stack+0x244/0x39d [ 2660.265171] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2660.270355] ? mark_held_locks+0x130/0x130 [ 2660.274602] ? up_write+0x7b/0x220 [ 2660.278165] should_fail.cold.4+0xa/0x17 [ 2660.282229] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2660.287335] ? __drm_mode_object_find+0x33/0x210 [ 2660.292109] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.297570] ? zap_class+0x640/0x640 [ 2660.301301] ? zap_class+0x640/0x640 [ 2660.305035] ? find_held_lock+0x36/0x1c0 [ 2660.309119] ? __lock_is_held+0xb5/0x140 [ 2660.313193] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.318626] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.324069] __should_failslab+0x124/0x180 [ 2660.328296] should_failslab+0x9/0x14 [ 2660.332087] kmem_cache_alloc_trace+0x2d7/0x750 [ 2660.336743] ? drm_modeset_lock+0x178/0x5c0 [ 2660.341074] drm_atomic_state_alloc+0xb8/0x110 [ 2660.345678] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2660.351059] __setplane_atomic+0x2a3/0x330 [ 2660.355302] setplane_internal+0x127/0x370 [ 2660.359545] ? __setplane_internal+0x5e0/0x5e0 [ 2660.364122] ? mutex_unlock+0xd/0x10 [ 2660.367835] ? __drm_mode_object_find+0xb8/0x210 [ 2660.372594] drm_mode_setplane+0x567/0x830 [ 2660.376826] ? drm_is_current_master+0x51/0x140 [ 2660.381513] drm_ioctl_kernel+0x278/0x330 [ 2660.385664] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2660.390513] ? drm_setversion+0x8b0/0x8b0 [ 2660.394674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2660.400225] ? _copy_from_user+0xdf/0x150 [ 2660.404388] drm_ioctl+0x57e/0xb00 [ 2660.407940] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2660.412824] ? drm_ioctl_kernel+0x330/0x330 [ 2660.417166] ? ksys_dup3+0x680/0x680 [ 2660.420900] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2660.425850] ? drm_ioctl_kernel+0x330/0x330 [ 2660.430224] do_vfs_ioctl+0x1de/0x1790 [ 2660.430245] ? __lock_is_held+0xb5/0x140 [ 2660.430263] ? ioctl_preallocate+0x300/0x300 [ 2660.430277] ? __fget_light+0x2e9/0x430 [ 2660.430292] ? fget_raw+0x20/0x20 [ 2660.430316] ? __sb_end_write+0xd9/0x110 [ 2660.454120] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2660.459682] ? fput+0x130/0x1a0 [ 2660.463014] ? do_syscall_64+0x9a/0x820 [ 2660.467002] ? do_syscall_64+0x9a/0x820 [ 2660.470996] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2660.475582] ? security_file_ioctl+0x94/0xc0 [ 2660.479994] ksys_ioctl+0xa9/0xd0 [ 2660.483448] __x64_sys_ioctl+0x73/0xb0 [ 2660.487413] do_syscall_64+0x1b9/0x820 [ 2660.491297] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2660.496664] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2660.501582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.506414] ? trace_hardirqs_on_caller+0x310/0x310 [ 2660.511485] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2660.516505] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2660.521512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.526344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.531530] RIP: 0033:0x457569 [ 2660.534722] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2660.553609] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:44:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4004ae8b, 0x0) r4 = semget$private(0x0, 0x0, 0x20) semctl$IPC_RMID(r4, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x641, 0x0) poll(&(0x7f0000000000)=[{r1, 0x2400}, {r3, 0x8400}, {r2, 0x324}, {r1, 0x1}, {r1, 0x1000}], 0x5, 0xfffffffff1104efa) 13:44:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getpid() r2 = gettid() r3 = getpgid(r2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r3) listen(r1, 0x100000000009) r4 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x3, 0xfffffffffffffff7, 0x10001, 0x9, 0x3, 0x3e, 0x7, 0x23d, 0x40, 0x30, 0x1000000, 0x0, 0x38, 0x1, 0x0, 0x8001}, [{0x7, 0x6, 0x80000000, 0x4, 0x6986, 0x7f, 0xffff, 0x10001}, {0x1, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0xd6b9}], "7879b790d2bdec5f9c285d651ccc53953c1447dcd928a7b0dd03d731fea1ddcd7657ce02ceb9078a739aa9c7c05f0b9ea27a13ca465eae00e97d1cc57c2ab106b4cdf285450b793a029bda5307af895a6ad1d3649382fe9c7b136c9a62d5f95c4e", [[], []]}, 0x311) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) connect(r4, &(0x7f0000000140)=@llc={0x1a, 0x303, 0x7f, 0x7, 0xcf5, 0x8, @remote}, 0x80) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) 13:44:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x48000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2660.561316] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2660.568586] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2660.575851] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2660.583107] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2660.590383] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:32 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2660.666078] binder: 1120:1122 DecRefs 0 refcount change on invalid ref 1207959552 ret -22 [ 2660.686607] FAULT_INJECTION: forcing a failure. [ 2660.686607] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.707065] CPU: 1 PID: 1127 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2660.714376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.723748] Call Trace: [ 2660.726351] dump_stack+0x244/0x39d [ 2660.730009] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2660.735205] ? mark_held_locks+0x130/0x130 [ 2660.739446] ? up_write+0x7b/0x220 [ 2660.743019] should_fail.cold.4+0xa/0x17 [ 2660.747086] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2660.752193] ? __drm_mode_object_find+0x33/0x210 [ 2660.756972] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.762425] ? zap_class+0x640/0x640 [ 2660.766148] ? zap_class+0x640/0x640 [ 2660.769875] ? find_held_lock+0x36/0x1c0 [ 2660.773965] ? __lock_is_held+0xb5/0x140 [ 2660.778047] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.783501] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.788974] __should_failslab+0x124/0x180 [ 2660.793223] should_failslab+0x9/0x14 [ 2660.797031] kmem_cache_alloc_trace+0x2d7/0x750 [ 2660.801708] ? drm_modeset_lock+0x178/0x5c0 [ 2660.806038] drm_atomic_state_alloc+0xb8/0x110 [ 2660.810627] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2660.815997] __setplane_atomic+0x2a3/0x330 [ 2660.820254] setplane_internal+0x127/0x370 [ 2660.824501] ? __setplane_internal+0x5e0/0x5e0 [ 2660.829098] ? mutex_unlock+0xd/0x10 [ 2660.832820] ? __drm_mode_object_find+0xb8/0x210 [ 2660.837582] drm_mode_setplane+0x567/0x830 [ 2660.841832] ? drm_is_current_master+0x51/0x140 [ 2660.846510] drm_ioctl_kernel+0x278/0x330 [ 2660.850664] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2660.855526] ? drm_setversion+0x8b0/0x8b0 [ 2660.859681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2660.865219] ? _copy_from_user+0xdf/0x150 [ 2660.869377] drm_ioctl+0x57e/0xb00 [ 2660.872937] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2660.877799] ? drm_ioctl_kernel+0x330/0x330 [ 2660.882136] ? ksys_dup3+0x680/0x680 [ 2660.885861] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2660.890816] ? drm_ioctl_kernel+0x330/0x330 [ 2660.895141] do_vfs_ioctl+0x1de/0x1790 [ 2660.899036] ? __lock_is_held+0xb5/0x140 [ 2660.903102] ? ioctl_preallocate+0x300/0x300 [ 2660.907513] ? __fget_light+0x2e9/0x430 [ 2660.911496] ? fget_raw+0x20/0x20 [ 2660.914975] ? __sb_end_write+0xd9/0x110 [ 2660.919055] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2660.924594] ? fput+0x130/0x1a0 [ 2660.927877] ? do_syscall_64+0x9a/0x820 [ 2660.931858] ? do_syscall_64+0x9a/0x820 [ 2660.935838] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2660.940441] ? security_file_ioctl+0x94/0xc0 [ 2660.944857] ksys_ioctl+0xa9/0xd0 [ 2660.948343] __x64_sys_ioctl+0x73/0xb0 [ 2660.952250] do_syscall_64+0x1b9/0x820 [ 2660.956140] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2660.961510] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2660.966442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.971295] ? trace_hardirqs_on_caller+0x310/0x310 [ 2660.976318] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2660.981348] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2660.986376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.991234] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.996420] RIP: 0033:0x457569 [ 2660.999631] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2661.018531] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2661.026245] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2661.033514] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2661.040788] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2661.048062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2661.055850] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:32 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 13:44:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x500, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200841) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="66baa000b000ee8faa401209c71200000f3567360fd4cac4c1f97ffc400f06c4a14576c6c744240000e00000c7442402b3000000c7442406000000000f011424c443fd08de64c4c3fbf03e00", 0x4c}], 0x1, 0x11, &(0x7f0000000240), 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10200, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-'}, 0x28, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4004ae8b, 0x0) 13:44:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xfdfdffff00000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2661.189609] FAULT_INJECTION: forcing a failure. [ 2661.189609] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.191793] binder: 1146:1148 DecRefs 0 refcount change on invalid ref 1280 ret -22 [ 2661.214560] CPU: 0 PID: 1144 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2661.221855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2661.231217] Call Trace: [ 2661.233862] dump_stack+0x244/0x39d 13:44:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xffffff7f00000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2661.237520] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2661.242737] ? rcu_softirq_qs+0x20/0x20 [ 2661.246746] ? unwind_dump+0x190/0x190 [ 2661.250651] should_fail.cold.4+0xa/0x17 [ 2661.254731] ? is_bpf_text_address+0xd3/0x170 [ 2661.259264] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2661.264382] ? __kernel_text_address+0xd/0x40 [ 2661.268891] ? unwind_get_return_address+0x61/0xa0 [ 2661.273840] ? zap_class+0x640/0x640 [ 2661.277596] ? find_held_lock+0x36/0x1c0 [ 2661.281690] ? __lock_is_held+0xb5/0x140 13:44:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x6000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2661.285779] ? perf_trace_sched_process_exec+0x860/0x860 [ 2661.291244] ? zap_class+0x640/0x640 [ 2661.294998] __should_failslab+0x124/0x180 [ 2661.299256] should_failslab+0x9/0x14 [ 2661.303074] __kmalloc+0x2e0/0x760 [ 2661.306663] ? __lock_is_held+0xb5/0x140 [ 2661.310735] ? drm_atomic_state_init+0x171/0x3b0 [ 2661.315521] drm_atomic_state_init+0x171/0x3b0 [ 2661.320154] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2661.325186] ? __drm_atomic_state_free+0xf0/0xf0 [ 2661.329981] drm_atomic_state_alloc+0xd0/0x110 [ 2661.334692] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2661.340085] __setplane_atomic+0x2a3/0x330 [ 2661.344354] setplane_internal+0x127/0x370 [ 2661.348615] ? __setplane_internal+0x5e0/0x5e0 [ 2661.353221] ? mutex_unlock+0xd/0x10 [ 2661.356969] ? __drm_mode_object_find+0xb8/0x210 [ 2661.361745] drm_mode_setplane+0x567/0x830 [ 2661.366003] ? drm_is_current_master+0x51/0x140 [ 2661.370681] drm_ioctl_kernel+0x278/0x330 [ 2661.374830] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2661.379692] ? drm_setversion+0x8b0/0x8b0 [ 2661.383858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2661.383876] ? _copy_from_user+0xdf/0x150 [ 2661.383897] drm_ioctl+0x57e/0xb00 [ 2661.383913] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2661.383936] ? drm_ioctl_kernel+0x330/0x330 [ 2661.393630] ? ksys_dup3+0x680/0x680 [ 2661.393689] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2661.393712] ? drm_ioctl_kernel+0x330/0x330 [ 2661.393731] do_vfs_ioctl+0x1de/0x1790 [ 2661.402102] ? __lock_is_held+0xb5/0x140 [ 2661.402123] ? ioctl_preallocate+0x300/0x300 [ 2661.402140] ? __fget_light+0x2e9/0x430 [ 2661.402156] ? fget_raw+0x20/0x20 [ 2661.402182] ? __sb_end_write+0xd9/0x110 [ 2661.415129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2661.415146] ? fput+0x130/0x1a0 [ 2661.415163] ? do_syscall_64+0x9a/0x820 [ 2661.415180] ? do_syscall_64+0x9a/0x820 [ 2661.415202] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2661.443294] ? security_file_ioctl+0x94/0xc0 [ 2661.443316] ksys_ioctl+0xa9/0xd0 [ 2661.443337] __x64_sys_ioctl+0x73/0xb0 [ 2661.443373] do_syscall_64+0x1b9/0x820 [ 2661.452174] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2661.452195] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2661.452211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2661.452231] ? trace_hardirqs_on_caller+0x310/0x310 [ 2661.452251] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2661.505894] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2661.510937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2661.515862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2661.521051] RIP: 0033:0x457569 [ 2661.524264] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2661.543177] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2661.550890] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2661.558158] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2661.565431] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2661.572703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2661.579984] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0xa00, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:33 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 13:44:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x60000, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000000009) sendto(r1, &(0x7f0000000080)="3cab401245a3b8683401a5025c886ef15b0da6473dac5ed6c65d5841264558ab72ee2c7af4f35ba7f6893b98258379a129dc922d12029b53b2d9b896580f469d5e6de35c6cd05703f05d9739593a0073812f70ceabd08283e417d11e845c5b31e66550da24bde0c99783921adb3abc241c53e8d1a0cda665b6c9", 0x7a, 0x800, &(0x7f0000000100)=@generic={0x7, "abcca16f0431850f7d4c990b21ef62ae919c8be4cf8a2a92a7a3aa1e8afa66eccc437748e6988a4d49e4f9c9f2846385a911b3d54886f403b10111d681d2c1992f22b1e7f2881667635eec39b71a5cd007b961d28e720c3887f0ddc9cda562278ead9b21428966abf29ab9472a53936d50e93c3eab6db08dd4287ea620c1"}, 0x80) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0), 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = dup3(r2, r2, 0x80000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1425b5c38803c1026f1fa6ed"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4004ae8b, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r7, r8) 13:44:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x2, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2661.720545] FAULT_INJECTION: forcing a failure. [ 2661.720545] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.738841] CPU: 0 PID: 1177 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2661.746143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2661.755505] Call Trace: [ 2661.758115] dump_stack+0x244/0x39d [ 2661.761772] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2661.767006] ? __kernel_text_address+0xd/0x40 [ 2661.771520] ? unwind_get_return_address+0x61/0xa0 [ 2661.776472] should_fail.cold.4+0xa/0x17 [ 2661.780555] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2661.785703] ? save_stack+0x43/0xd0 [ 2661.789340] ? kasan_kmalloc+0xc7/0xe0 [ 2661.793235] ? __kmalloc+0x15b/0x760 [ 2661.796973] ? drm_atomic_state_init+0x171/0x3b0 [ 2661.801738] ? drm_atomic_state_alloc+0xd0/0x110 [ 2661.806500] ? zap_class+0x640/0x640 [ 2661.810233] ? drm_mode_setplane+0x567/0x830 [ 2661.810253] ? drm_ioctl_kernel+0x278/0x330 [ 2661.818988] ? drm_ioctl+0x57e/0xb00 [ 2661.819003] ? do_vfs_ioctl+0x1de/0x1790 [ 2661.819016] ? ksys_ioctl+0xa9/0xd0 [ 2661.819029] ? __x64_sys_ioctl+0x73/0xb0 [ 2661.819045] ? do_syscall_64+0x1b9/0x820 [ 2661.819066] ? find_held_lock+0x36/0x1c0 [ 2661.838552] ? __lock_is_held+0xb5/0x140 [ 2661.838584] ? perf_trace_sched_process_exec+0x860/0x860 [ 2661.838626] __should_failslab+0x124/0x180 [ 2661.838647] should_failslab+0x9/0x14 [ 2661.846762] __kmalloc+0x2e0/0x760 [ 2661.846778] ? __lock_is_held+0xb5/0x140 [ 2661.846795] ? drm_atomic_state_init+0x20b/0x3b0 [ 2661.846813] drm_atomic_state_init+0x20b/0x3b0 [ 2661.877192] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2661.882216] ? __drm_atomic_state_free+0xf0/0xf0 [ 2661.886998] drm_atomic_state_alloc+0xd0/0x110 [ 2661.891590] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2661.896975] __setplane_atomic+0x2a3/0x330 [ 2661.901225] setplane_internal+0x127/0x370 [ 2661.905472] ? __setplane_internal+0x5e0/0x5e0 [ 2661.910071] ? mutex_unlock+0xd/0x10 [ 2661.913786] ? __drm_mode_object_find+0xb8/0x210 [ 2661.918550] drm_mode_setplane+0x567/0x830 [ 2661.923226] ? drm_is_current_master+0x51/0x140 [ 2661.927906] drm_ioctl_kernel+0x278/0x330 [ 2661.932073] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2661.936980] ? drm_setversion+0x8b0/0x8b0 [ 2661.941152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2661.946708] ? _copy_from_user+0xdf/0x150 [ 2661.950862] drm_ioctl+0x57e/0xb00 [ 2661.954405] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2661.959259] ? drm_ioctl_kernel+0x330/0x330 [ 2661.963615] ? ksys_dup3+0x680/0x680 [ 2661.967381] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2661.972320] ? drm_ioctl_kernel+0x330/0x330 [ 2661.976645] do_vfs_ioctl+0x1de/0x1790 [ 2661.980550] ? __lock_is_held+0xb5/0x140 [ 2661.984628] ? ioctl_preallocate+0x300/0x300 [ 2661.989046] ? __fget_light+0x2e9/0x430 [ 2661.993027] ? fget_raw+0x20/0x20 [ 2661.996487] ? __sb_end_write+0xd9/0x110 [ 2662.000560] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2662.006104] ? fput+0x130/0x1a0 [ 2662.009408] ? do_syscall_64+0x9a/0x820 [ 2662.013386] ? do_syscall_64+0x9a/0x820 [ 2662.017361] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2662.021965] ? security_file_ioctl+0x94/0xc0 [ 2662.026381] ksys_ioctl+0xa9/0xd0 [ 2662.029843] __x64_sys_ioctl+0x73/0xb0 [ 2662.033742] do_syscall_64+0x1b9/0x820 [ 2662.037634] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2662.043011] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2662.047955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2662.053024] ? trace_hardirqs_on_caller+0x310/0x310 [ 2662.058051] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2662.063077] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2662.068100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2662.072986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.078181] RIP: 0033:0x457569 [ 2662.081378] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2662.100286] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2662.107996] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2662.115319] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2662.122605] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2662.129873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2662.137140] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x80}, 0xfffffffffffffffb}], 0x2, 0x81) 13:44:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) accept$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000000009) r4 = accept(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0, 0x0, 0x24048855}, 0x7c}], 0x1, 0x81) 13:44:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x100000000000000, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:44:33 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2662.219144] binder_transaction: 10 callbacks suppressed [ 2662.219154] binder: 1193:1194 got reply transaction with no transaction stack [ 2662.247262] binder_transaction: 10 callbacks suppressed [ 2662.247281] binder: 1193:1194 transaction failed 29201/-71, size 0-0 line 2741 [ 2662.269302] FAULT_INJECTION: forcing a failure. [ 2662.269302] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.284371] CPU: 0 PID: 1200 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2662.291659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.301010] Call Trace: [ 2662.303621] dump_stack+0x244/0x39d [ 2662.307273] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2662.312476] should_fail.cold.4+0xa/0x17 [ 2662.316541] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2662.321656] ? kasan_kmalloc+0xc7/0xe0 [ 2662.325549] ? zap_class+0x640/0x640 [ 2662.329266] ? drm_atomic_helper_disable_plane+0x3a/0x200 [ 2662.334803] ? __setplane_atomic+0x2a3/0x330 [ 2662.339218] ? do_vfs_ioctl+0x1de/0x1790 [ 2662.343279] ? ksys_ioctl+0xa9/0xd0 [ 2662.346902] ? __x64_sys_ioctl+0x73/0xb0 [ 2662.350978] ? do_syscall_64+0x1b9/0x820 [ 2662.355041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.360410] ? zap_class+0x640/0x640 [ 2662.364138] ? find_held_lock+0x36/0x1c0 [ 2662.368205] ? __lock_is_held+0xb5/0x140 [ 2662.372297] ? klist_remove+0x418/0x460 [ 2662.376288] ? perf_trace_sched_process_exec+0x860/0x860 [ 2662.381746] ? ww_mutex_lock_interruptible+0x41/0xb0 [ 2662.386869] __should_failslab+0x124/0x180 [ 2662.391112] should_failslab+0x9/0x14 [ 2662.394928] kmem_cache_alloc_trace+0x2d7/0x750 [ 2662.399643] ? drm_atomic_state_init+0x27a/0x3b0 [ 2662.404414] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2662.409442] vkms_plane_duplicate_state+0x49/0x120 [ 2662.414377] drm_atomic_get_plane_state+0x225/0x560 [ 2662.419401] drm_atomic_helper_disable_plane+0x7b/0x200 [ 2662.424781] __setplane_atomic+0x2a3/0x330 [ 2662.429032] setplane_internal+0x127/0x370 [ 2662.433292] ? __setplane_internal+0x5e0/0x5e0 [ 2662.437899] ? mutex_unlock+0xd/0x10 [ 2662.441628] ? __drm_mode_object_find+0xb8/0x210 [ 2662.446485] drm_mode_setplane+0x567/0x830 [ 2662.450740] ? drm_is_current_master+0x51/0x140 [ 2662.455421] drm_ioctl_kernel+0x278/0x330 [ 2662.459576] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2662.464420] ? drm_setversion+0x8b0/0x8b0 [ 2662.468574] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2662.474423] ? _copy_from_user+0xdf/0x150 [ 2662.478579] drm_ioctl+0x57e/0xb00 [ 2662.482123] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2662.486985] ? drm_ioctl_kernel+0x330/0x330 [ 2662.491318] ? ksys_dup3+0x680/0x680 [ 2662.495044] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2662.499997] ? drm_ioctl_kernel+0x330/0x330 [ 2662.504320] do_vfs_ioctl+0x1de/0x1790 [ 2662.508208] ? __lock_is_held+0xb5/0x140 [ 2662.512273] ? ioctl_preallocate+0x300/0x300 [ 2662.516682] ? __fget_light+0x2e9/0x430 [ 2662.520659] ? fget_raw+0x20/0x20 [ 2662.524116] ? __sb_end_write+0xd9/0x110 [ 2662.528182] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2662.533732] ? fput+0x130/0x1a0 [ 2662.537019] ? do_syscall_64+0x9a/0x820 [ 2662.540995] ? do_syscall_64+0x9a/0x820 [ 2662.544985] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2662.549590] ? security_file_ioctl+0x94/0xc0 [ 2662.554007] ksys_ioctl+0xa9/0xd0 [ 2662.557464] __x64_sys_ioctl+0x73/0xb0 [ 2662.561357] do_syscall_64+0x1b9/0x820 [ 2662.565244] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2662.570622] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2662.575681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2662.580542] ? trace_hardirqs_on_caller+0x310/0x310 [ 2662.585577] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2662.590612] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2662.595636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2662.600496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.605679] RIP: 0033:0x457569 [ 2662.608870] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2662.627774] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2662.635499] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2662.642769] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2662.650039] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2662.657305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 13:44:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40800, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x4, 0x14000}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4004ae8b, 0x0) [ 2662.664576] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 13:44:34 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 13:44:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:44:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x600, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 2662.699878] binder_release_work: 10 callbacks suppressed [ 2662.699919] binder: undelivered TRANSACTION_ERROR: 29201 [ 2662.768561] FAULT_INJECTION: forcing a failure. [ 2662.768561] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.782209] binder: 1209:1210 got reply transaction with no transaction stack [ 2662.791794] CPU: 1 PID: 1208 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2662.799089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.808447] Call Trace: [ 2662.811054] dump_stack+0x244/0x39d [ 2662.814696] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2662.819898] ? __kernel_text_address+0xd/0x40 [ 2662.824403] ? unwind_get_return_address+0x61/0xa0 [ 2662.829347] should_fail.cold.4+0xa/0x17 [ 2662.833464] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2662.838619] ? save_stack+0x43/0xd0 [ 2662.842249] ? kasan_kmalloc+0xc7/0xe0 [ 2662.846138] ? kmem_cache_alloc_trace+0x152/0x750 [ 2662.851013] ? vkms_plane_duplicate_state+0x49/0x120 [ 2662.856140] ? drm_atomic_get_plane_state+0x225/0x560 [ 2662.861339] ? zap_class+0x640/0x640 [ 2662.865057] ? drm_mode_setplane+0x567/0x830 [ 2662.869481] ? drm_ioctl_kernel+0x278/0x330 [ 2662.873807] ? drm_ioctl+0x57e/0xb00 [ 2662.877537] ? do_vfs_ioctl+0x1de/0x1790 [ 2662.881607] ? ksys_ioctl+0xa9/0xd0 [ 2662.885238] ? __x64_sys_ioctl+0x73/0xb0 [ 2662.889309] ? do_syscall_64+0x1b9/0x820 [ 2662.893382] ? find_held_lock+0x36/0x1c0 [ 2662.897493] ? __lock_is_held+0xb5/0x140 [ 2662.901592] ? perf_trace_sched_process_exec+0x860/0x860 [ 2662.907059] __should_failslab+0x124/0x180 [ 2662.911301] should_failslab+0x9/0x14 [ 2662.915105] kmem_cache_alloc_trace+0x2d7/0x750 [ 2662.919779] ? drm_atomic_state_init+0x27a/0x3b0 [ 2662.924556] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2662.929583] vkms_plane_duplicate_state+0x92/0x120 [ 2662.934523] drm_atomic_get_plane_state+0x225/0x560 [ 2662.939580] drm_atomic_helper_disable_plane+0x7b/0x200 [ 2662.944962] __setplane_atomic+0x2a3/0x330 [ 2662.949215] setplane_internal+0x127/0x370 [ 2662.953470] ? __setplane_internal+0x5e0/0x5e0 [ 2662.958070] ? mutex_unlock+0xd/0x10 [ 2662.961813] ? __drm_mode_object_find+0xb8/0x210 [ 2662.966583] drm_mode_setplane+0x567/0x830 [ 2662.970824] ? drm_is_current_master+0x51/0x140 [ 2662.975520] drm_ioctl_kernel+0x278/0x330 [ 2662.979688] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2662.984545] ? drm_setversion+0x8b0/0x8b0 [ 2662.988714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2662.994273] ? _copy_from_user+0xdf/0x150 [ 2662.998443] drm_ioctl+0x57e/0xb00 [ 2663.002006] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2663.006862] ? drm_ioctl_kernel+0x330/0x330 [ 2663.011211] ? ksys_dup3+0x680/0x680 [ 2663.014941] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2663.019902] ? drm_ioctl_kernel+0x330/0x330 [ 2663.024231] do_vfs_ioctl+0x1de/0x1790 [ 2663.028126] ? __lock_is_held+0xb5/0x140 [ 2663.032194] ? ioctl_preallocate+0x300/0x300 [ 2663.036642] ? __fget_light+0x2e9/0x430 [ 2663.040625] ? fget_raw+0x20/0x20 [ 2663.044086] ? __sb_end_write+0xd9/0x110 [ 2663.048158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2663.054219] ? fput+0x130/0x1a0 [ 2663.057504] ? do_syscall_64+0x9a/0x820 [ 2663.061503] ? do_syscall_64+0x9a/0x820 [ 2663.065486] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2663.070099] ? security_file_ioctl+0x94/0xc0 [ 2663.074514] ksys_ioctl+0xa9/0xd0 [ 2663.077983] __x64_sys_ioctl+0x73/0xb0 [ 2663.081882] do_syscall_64+0x1b9/0x820 [ 2663.085776] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2663.091146] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2663.096082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.100935] ? trace_hardirqs_on_caller+0x310/0x310 [ 2663.105970] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2663.111012] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2663.116038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.120891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.126080] RIP: 0033:0x457569 [ 2663.129280] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2663.148196] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2663.155918] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2663.163195] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2663.170481] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2663.177756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2663.185036] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 [ 2663.207924] binder: 1209:1210 transaction failed 29201/-71, size 0-0 line 2741 [ 2663.235436] WARNING: CPU: 1 PID: 1208 at drivers/gpu/drm/vkms/vkms_plane.c:26 vkms_plane_duplicate_state+0x9f/0x120 [ 2663.246043] Kernel panic - not syncing: panic_on_warn set ... [ 2663.251968] CPU: 1 PID: 1208 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #362 [ 2663.259245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.264915] binder: undelivered TRANSACTION_ERROR: 29201 [ 2663.268626] Call Trace: [ 2663.268648] dump_stack+0x244/0x39d [ 2663.268669] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2663.268697] panic+0x2ad/0x55c [ 2663.268716] ? add_taint.cold.5+0x16/0x16 [ 2663.292967] ? __warn.cold.8+0x5/0x45 [ 2663.296759] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2663.301848] __warn.cold.8+0x20/0x45 [ 2663.305545] ? rcu_softirq_qs+0x20/0x20 [ 2663.309521] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2663.314612] report_bug+0x254/0x2d0 [ 2663.318243] do_error_trap+0x11b/0x200 [ 2663.322149] do_invalid_op+0x36/0x40 [ 2663.325883] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2663.331094] invalid_op+0x14/0x20 [ 2663.334561] RIP: 0010:vkms_plane_duplicate_state+0x9f/0x120 [ 2663.340279] Code: 00 0f 85 86 00 00 00 48 8b 3d 5d 7a db 04 ba f8 00 00 00 be c0 80 60 00 e8 0e e7 76 fd 48 85 c0 49 89 c5 75 13 e8 41 db 33 fd <0f> 0b 48 c7 c7 a0 26 7b 88 e8 67 27 1a fd e8 2e db 33 fd 48 8d bb [ 2663.359179] RSP: 0018:ffff888187f876f8 EFLAGS: 00010246 [ 2663.364543] RAX: 0000000000040000 RBX: ffff8881d716fe00 RCX: ffffc9000be3a000 [ 2663.371808] RDX: 0000000000040000 RSI: ffffffff844bc07f RDI: 0000000000000286 [ 2663.379074] RBP: ffff888187f87710 R08: ffff888180284180 R09: ffffed103b5e5b5f [ 2663.386328] R10: ffffed103b5e5b5f R11: ffff8881daf2dafb R12: ffff8881d1db8900 [ 2663.393585] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888187f87860 [ 2663.400857] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2663.405963] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2663.411061] drm_atomic_get_plane_state+0x225/0x560 [ 2663.416073] drm_atomic_helper_disable_plane+0x7b/0x200 [ 2663.421427] __setplane_atomic+0x2a3/0x330 [ 2663.425655] setplane_internal+0x127/0x370 [ 2663.429901] ? __setplane_internal+0x5e0/0x5e0 [ 2663.434484] ? mutex_unlock+0xd/0x10 [ 2663.438189] ? __drm_mode_object_find+0xb8/0x210 [ 2663.442943] drm_mode_setplane+0x567/0x830 [ 2663.447192] ? drm_is_current_master+0x51/0x140 [ 2663.451865] drm_ioctl_kernel+0x278/0x330 [ 2663.456022] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2663.460855] ? drm_setversion+0x8b0/0x8b0 [ 2663.465002] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2663.470548] ? _copy_from_user+0xdf/0x150 [ 2663.474699] drm_ioctl+0x57e/0xb00 [ 2663.478226] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2663.483061] ? drm_ioctl_kernel+0x330/0x330 [ 2663.487375] ? ksys_dup3+0x680/0x680 [ 2663.491099] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2663.496033] ? drm_ioctl_kernel+0x330/0x330 [ 2663.500354] do_vfs_ioctl+0x1de/0x1790 [ 2663.504241] ? __lock_is_held+0xb5/0x140 [ 2663.508313] ? ioctl_preallocate+0x300/0x300 [ 2663.512709] ? __fget_light+0x2e9/0x430 [ 2663.516688] ? fget_raw+0x20/0x20 [ 2663.520138] ? __sb_end_write+0xd9/0x110 [ 2663.524193] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2663.529732] ? fput+0x130/0x1a0 [ 2663.533019] ? do_syscall_64+0x9a/0x820 [ 2663.536982] ? do_syscall_64+0x9a/0x820 [ 2663.540983] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2663.545595] ? security_file_ioctl+0x94/0xc0 [ 2663.550005] ksys_ioctl+0xa9/0xd0 [ 2663.553452] __x64_sys_ioctl+0x73/0xb0 [ 2663.557333] do_syscall_64+0x1b9/0x820 [ 2663.561228] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2663.566606] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2663.571545] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.576380] ? trace_hardirqs_on_caller+0x310/0x310 [ 2663.581415] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2663.586441] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2663.591455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.596295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.601484] RIP: 0033:0x457569 [ 2663.604666] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2663.623552] RSP: 002b:00007f15e724ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2663.631249] RAX: ffffffffffffffda RBX: 00007f15e724ac90 RCX: 0000000000457569 [ 2663.638502] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 2663.645786] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2663.653045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e724b6d4 [ 2663.660301] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000005 [ 2663.668865] Kernel Offset: disabled [ 2663.672591] Rebooting in 86400 seconds..